Hi. I am trying to use pipelines in graylog and have a problem:
I could not parse a json field and then could not use set_fields command in pipeline rule. If I didnot minsunderstand, I can parse a json field with parse_json command. then, I have a jsontree now. So, I must use select_json and then use set_fields commands to be able to set field names and values automatically. I could not use select_jsonpath command in rules. (I could not set arguments) Can anybody give me a sample for these 3 commands ? (parse_json, select_jsonpath, set_fields) Thank you. -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/1ed201e9-f469-4694-86ca-525b100b9bb0%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
