<https://lh3.googleusercontent.com/-zZQYrxzu9sY/Vz6OiDr_8jI/AAAAAAAAANg/SLJPRv99oGYao3ixjneUKcU_uU-Bm0OjwCLcB/s1600/edit-stream-rules.PNG> Hi Tokred,
Sorry I couldn't see any button or filed that you're mention. Once again sorry. Is that something like this one (attach pic)? I found that in, Manage stream rules --> Edit rules On Tuesday, May 17, 2016 at 3:57:47 PM UTC+8, [email protected] wrote: > > Yes, add a rule that uses the "source" field to match on one of your > Windows machines by IP or DNS (look into your messages and check the values > of "source"). Then create e.g. one stream per Windows machine or however > you prefer. > > Regards > > > On Monday, May 16, 2016 at 6:14:11 AM UTC+2, Arief Hydayat wrote: >> >> Sorry, I wanna ask about "use the source field as filter criteria" Did >> you mean that's in Manage stream rules? >> Sorry >> > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/78952a97-5780-45ef-9b3f-5355b2b68891%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
