Hi Emanuel,
that's currently not possible with Graylog.
Cheers,
Jochen
On Friday, 7 October 2016 15:26:43 UTC+2, Emanuel Valente wrote:
>
> Hello everyone,
>
> I'm new on Graylog and I'd like to know if I can do JOIN based queries in
> my search.
>
> I have the following situation:
>
> I'm sending GELF format logs to Graylog like that:
>
> '{..."idsession_x": 11111, "token_x": "aaaa", ..}'
>
> and
>
> {..."idsession_y": 11111, "token_y": "aaab", ..}'
>
> And I want to search like:
>
> idsession_x = idsession_y
>
> i.e., it should return all messages where idession_x value field is equal
> to idsession_y value field.
>
> I read the documentation on
> http://docs.graylog.org/en/2.1/pages/queries.html and it seems I can't do
> that using the web interface.
> On plugins page (http://docs.graylog.org/en/2.1/pages/plugins.html), it
> isn't saying that it supports search plugin type, so I can't explore it.
>
> Is that possible?
>
> --
> Emanuel
>
>
>
>
>
>
>
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/923fdbf5-fca2-4307-af34-f6e3d732ecee%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
