Heja Jochen, Thank you for your patience with me. I finally understand your point. Normalen i do get things quicker ;-)
Will use the pipes for Levels and facility and raw Text with extractors for now. I like the Pipelines more but as you statet they aren't primetime yet. Thanks for the great work! Am 01.09.2016 3:02 nachm. schrieb "Jochen Schalanda" <[email protected]>: > Hi Markus > > On Thursday, 1 September 2016 14:14:11 UTC+2, Markus Fischbacher wrote: >> >> I don't understand how facility and level are provided but not on the >> very beginning of a message. >> > > The encoding of facility and level in the syslog priority (the "<166>" > part of your example message) is described at > https://tools.ietf.org/html/rfc5424#section-6.2.1. You can use the > already mentioned converters to extract those values. > > Cheers, > Jochen > > -- > You received this message because you are subscribed to a topic in the > Google Groups "Graylog Users" group. > To unsubscribe from this topic, visit > https://groups.google.com/d/topic/graylog2/jj6mdnQ4B40/unsubscribe. > To unsubscribe from this group and all its topics, send an email to > [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/graylog2/7017e440-a07f-41ad-8f55-138a7dee8d63%40googlegroups.com > <https://groups.google.com/d/msgid/graylog2/7017e440-a07f-41ad-8f55-138a7dee8d63%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- BG Markus -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/CALei8VRyMdQxC7Re5KQSmdiKAssU5TCTqtUo-GkOTC3h3TApdQ%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
