Arg, sorry - autocomplete on tablet. I don't see a way to extract syslog levels - they doesn't come in the message(-string) itself. Level and facility seems to come in additional udp sections/frames.
BUT as you already stated on one of my issues i filed as you trying to phase out extractors ( which is good ) and use pipelines it would be even better, if Syslog Inputs don't automatically parse application_name and process_id fields. I just don't see how to filter out incorrectly parsed entries other than build an own rule/extractor for all messages i know - which will be a huge amount of future maintenance. Am Montag, 29. August 2016 16:47:12 UTC+2 schrieb Jochen Schalanda: > > Hi Markus, > > On Friday, 26 August 2016 20:06:04 UTC+2, Markus Fischbacher wrote: > >> Anton know a way to extract syslog Levels. That doesn’t comes in the >> message itself. Level and facility should be udp section? >> > > Could you please rephrase that? I don't understand what you're trying to > say. > > > Cheers, > Jochen > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/02eab7c1-8991-44d1-bfb1-c62cb1cd9746%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
