Hi Tokred, Thanks a lot for your assist. I can find the Stream Rule setting that you're mentioned. I can filter the source from thru the Stream now. Once again thanks a lot.
On Tue, May 17, 2016 at 3:57 PM, <[email protected]> wrote: > Yes, add a rule that uses the "source" field to match on one of your > Windows machines by IP or DNS (look into your messages and check the values > of "source"). Then create e.g. one stream per Windows machine or however > you prefer. > > Regards > > > On Monday, May 16, 2016 at 6:14:11 AM UTC+2, Arief Hydayat wrote: >> >> Sorry, I wanna ask about "use the source field as filter criteria" Did >> you mean that's in Manage stream rules? >> Sorry >> > -- > You received this message because you are subscribed to a topic in the > Google Groups "Graylog Users" group. > To unsubscribe from this topic, visit > https://groups.google.com/d/topic/graylog2/X0074TElBmA/unsubscribe. > To unsubscribe from this group and all its topics, send an email to > [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/graylog2/3dd82d5f-c205-46ee-ac4f-b9220a6fe731%40googlegroups.com > <https://groups.google.com/d/msgid/graylog2/3dd82d5f-c205-46ee-ac4f-b9220a6fe731%40googlegroups.com?utm_medium=email&utm_source=footer> > . > > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/CAHKvR%3DdQBHJ1DSNX1qLLCsq57w0p8BF2Uxp6AuJTBUnypMGeqg%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
