Hi Anas, On Tuesday, 15 November 2016 10:49:53 UTC+1, Benbrahim Anass wrote: > > i wanna use graylog just for indexing in real time thoses logs and > configure alarms based on them in real time always >
That's not possible. Graylog is using regular searches to check for alert conditions. You could, however, reduce the retention time for your indices, e. g. only keep messages for 1 day (or whatever is suitable in your environment). Cheers, Jochen -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/30960cce-594c-4ef4-b785-07bc072a863d%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
