Yes, thats a 2.1 feature.

On 22 November 2016 at 15:15, husayn arrah <[email protected]> wrote:

> Hello
>
> Thanks for the reply.
>
> I am currently on graylog version 2.0.3, and don't have that option on the
> ui, was that added in version 2.1 ?
>
>
> <https://lh3.googleusercontent.com/-jv3FEaKHs30/WDRS2ySkhTI/AAAAAAAAAI0/HuN87WebUlcClvyNuMJsColp1tvmtj8KgCLcB/s1600/2016-11-22%2B16_14_25-Graylog%2BWeb%2BInterface.png>
>
>
> On Tuesday, November 22, 2016 at 2:40:22 PM UTC+2, Marius Sturm wrote:
>>
>> Hi,
>> click on edit to open the input configuration and add the snippet at
>> the bottom in the 'Verbatim configuration' field.
>>
>> Cheers,
>> Marius
>>
>> On 22 November 2016 at 13:03, husayn arrah <[email protected]> wrote:
>> > Hello
>> >
>> > I have setup a sidecar collector config on graylog using the default
>> nxlog
>> > config
>> >
>> > I would like to modify the file input using a snippet.
>> >
>> > The config currently looks like this
>> >
>> > <Input 582ef996c0ebd7060613002f>
>> >         Module im_file
>> >         File '/var/log/nginx/access-api-*.log'
>> >         PollInterval 1
>> >         SavePos True
>> >         ReadFromLast False
>> >         Recursive True
>> >         RenameCheck True
>> >         Exec $FileName = file_name(); # Send file name with each
>> message
>> > </Input>
>> >
>> > I want it to look like
>> >
>> > <Input 582ef996c0ebd7060613002f>
>> >         Module im_file
>> >         File '/var/log/nginx/access-api-*.log'
>> >         PollInterval 1
>> >         SavePos True
>> >         ReadFromLast False
>> >         Recursive True
>> >         RenameCheck True
>> >         Exec $FileName = file_name(); # Send file name with each
>> message
>> >
>> >         rename_field("FileName", "file_name");
>> >         Exec delete($EventReceivedTime);
>> > Exec delete($SourceModuleName);
>> > Exec delete($SourceModuleType);
>> > </Input>
>> >
>> > When I add the extra lines as a snippet, it gets added to the global
>> context
>> > and not inside the Input context.
>> >
>> > How could I go about achieving this from the graylog ui ?
>> >
>> > Thanks
>> >
>> > --
>> > You received this message because you are subscribed to the Google
>> Groups
>> > "Graylog Users" group.
>> > To unsubscribe from this group and stop receiving emails from it, send
>> an
>> > email to [email protected].
>> > To view this discussion on the web visit
>> > https://groups.google.com/d/msgid/graylog2/f161447b-637f-40d
>> 8-8ead-1fbcecc10d78%40googlegroups.com.
>> > For more options, visit https://groups.google.com/d/optout.
>>
>>
>>
>> --
>> Developer
>>
>> Tel.: +49 (0)40 609 452 077
>> Fax.: +49 (0)40 609 452 078
>>
>> TORCH GmbH - A Graylog Company
>> Poolstraße 21
>> 20335 Hamburg
>> Germany
>>
>> https://www.graylog.com
>>
>> Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175
>> Geschäftsführer: Lennart Koopmann (CEO)
>>
> --
> You received this message because you are subscribed to the Google Groups
> "Graylog Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion on the web visit https://groups.google.com/d/
> msgid/graylog2/01cec372-9351-406d-a6e9-0edecb41d2e5%40googlegroups.com
> <https://groups.google.com/d/msgid/graylog2/01cec372-9351-406d-a6e9-0edecb41d2e5%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
>
> For more options, visit https://groups.google.com/d/optout.
>



-- 
Developer

Tel.: +49 (0)40 609 452 077
Fax.: +49 (0)40 609 452 078

TORCH GmbH - A Graylog Company
Poolstraße 21
20335 Hamburg
Germany

https://www.graylog.com <https://www.torch.sh/>

Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175
Geschäftsführer: Lennart Koopmann (CEO)

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/CAMqbBbKNHv7Jq4rK5Moc6yvOMSz51%2Bu_RezydYMoXzo_jomaJQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to