Hi, you can create such rules using the message processing pipelines, see http://docs.graylog.org/en/2.1/pages/pipelines.html for details.
Cheers, Jochen On Sunday, 23 October 2016 11:30:54 UTC+2, markham extra wrote: > > Hi, > > How create a new field with a specific word when an existing field contain > an other word, > > for example > > i have a field *msg* who's contain : > > blahblahblahbl ahblahbla hblah blah *unicorn* blahblahblahblah > blahblahblah blahblahblah > blahblahblahblah blahblahblahblah blahblahblahblah blahblahblahblah > > i want create a new field named *Type* who's contains the word : *Tales * > when *msg *contain* unicorn.* (like this example). > > how i do that ? > > Thx > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/5944d6bb-ab6e-4047-a02c-d76458876d62%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
