Would you try the good command please?
You tried with /| instead of \|
%{GREEDYDATA:UNWANTED}srcIP=%{IP:srcip}\|scrPort=%{NUMBER:srcport}
OR
%{GREEDYDATA:UNWANTED}.*srcIP=%{IP:srcip}\|scrPort=%{NUMBER:srcport}
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/bd694742-ed33-465e-b464-4122841721d5%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
