I have OpenNMS writing all events to syslog and graylog2 is ingesting all
syslog messages via logstash/gelf.
The messages get into graylog2 fine and I can search them.
I configured a stream and tested the e-mail with dummy e-mail and the
e-mail makes it to me just fine.
My stream uses a regex to find the words "is down" (from a typical OpenNMS
node is down event, and the stream "Test against stream" finds it and in
live running it also says that it successfully routed it [ this is the
actual regex if your curious and it works: \bis\W+(?:\w+\W+){0,2}?down\b ]
Routed into streams
- Watching OpenNMS Reporting that a Node is Down
<http://172.16.12.55:9000/streams/57b1da2f738065109b1608a2/search>
However, after all that the e-mail doesn't fire and the counter I created
for the dashboard still says 0.
Any ideas what could be wrong?
Thanks,
Rob
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/d57152d7-22aa-4b71-b5de-89af4e388dbd%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.