Hi-
I'm trying to create a pipeline to send messages to another stream based on
the application that generated it. In the message, that's represented in
the tag field. All I need is a simple string comparison, but I can't figure
out how to access the actual values of the fields. I've tried the following
two rules to no avail:
rule "app_1_tomcat"
when
contains(to_string(message.tag), "tomcat")
then
route_to_stream("App 1 Tomcat");
end
rule "app_1_tomcat"
when
message.tag == "tomcat"
then
route_to_stream("App 1 Tomcat");
end
The stream that is attached to this pipeline only matches on App 1, the
pipeline is only attached to that stream, and one of the above rules is the
only rule attached to the pipeline. What am I missing?
Let me know if there's any information I can fill in.
-Ross
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/2af96886-1ba1-4c65-b016-dfba6dcfc177%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
