Cool. Thanks

On Tuesday, November 22, 2016 at 4:37:27 PM UTC+2, Marius Sturm wrote:
>
> Yes, thats a 2.1 feature.
>
> On 22 November 2016 at 15:15, husayn arrah <[email protected] 
> <javascript:>> wrote:
>
>> Hello
>>
>> Thanks for the reply.
>>
>> I am currently on graylog version 2.0.3, and don't have that option on 
>> the ui, was that added in version 2.1 ?
>>
>>
>> <https://lh3.googleusercontent.com/-jv3FEaKHs30/WDRS2ySkhTI/AAAAAAAAAI0/HuN87WebUlcClvyNuMJsColp1tvmtj8KgCLcB/s1600/2016-11-22%2B16_14_25-Graylog%2BWeb%2BInterface.png>
>>
>>
>> On Tuesday, November 22, 2016 at 2:40:22 PM UTC+2, Marius Sturm wrote:
>>>
>>> Hi, 
>>> click on edit to open the input configuration and add the snippet at 
>>> the bottom in the 'Verbatim configuration' field. 
>>>
>>> Cheers, 
>>> Marius 
>>>
>>> On 22 November 2016 at 13:03, husayn arrah <[email protected]> wrote: 
>>> > Hello 
>>> > 
>>> > I have setup a sidecar collector config on graylog using the default 
>>> nxlog 
>>> > config 
>>> > 
>>> > I would like to modify the file input using a snippet. 
>>> > 
>>> > The config currently looks like this 
>>> > 
>>> > <Input 582ef996c0ebd7060613002f> 
>>> >         Module im_file 
>>> >         File '/var/log/nginx/access-api-*.log' 
>>> >         PollInterval 1 
>>> >         SavePos True 
>>> >         ReadFromLast False 
>>> >         Recursive True 
>>> >         RenameCheck True 
>>> >         Exec $FileName = file_name(); # Send file name with each 
>>> message 
>>> > </Input> 
>>> > 
>>> > I want it to look like 
>>> > 
>>> > <Input 582ef996c0ebd7060613002f> 
>>> >         Module im_file 
>>> >         File '/var/log/nginx/access-api-*.log' 
>>> >         PollInterval 1 
>>> >         SavePos True 
>>> >         ReadFromLast False 
>>> >         Recursive True 
>>> >         RenameCheck True 
>>> >         Exec $FileName = file_name(); # Send file name with each 
>>> message 
>>> > 
>>> >         rename_field("FileName", "file_name"); 
>>> >         Exec delete($EventReceivedTime); 
>>> > Exec delete($SourceModuleName); 
>>> > Exec delete($SourceModuleType); 
>>> > </Input> 
>>> > 
>>> > When I add the extra lines as a snippet, it gets added to the global 
>>> context 
>>> > and not inside the Input context. 
>>> > 
>>> > How could I go about achieving this from the graylog ui ? 
>>> > 
>>> > Thanks 
>>> > 
>>> > -- 
>>> > You received this message because you are subscribed to the Google 
>>> Groups 
>>> > "Graylog Users" group. 
>>> > To unsubscribe from this group and stop receiving emails from it, send 
>>> an 
>>> > email to [email protected]. 
>>> > To view this discussion on the web visit 
>>> > 
>>> https://groups.google.com/d/msgid/graylog2/f161447b-637f-40d8-8ead-1fbcecc10d78%40googlegroups.com.
>>>  
>>>
>>> > For more options, visit https://groups.google.com/d/optout. 
>>>
>>>
>>>
>>> -- 
>>> Developer 
>>>
>>> Tel.: +49 (0)40 609 452 077 
>>> Fax.: +49 (0)40 609 452 078 
>>>
>>> TORCH GmbH - A Graylog Company 
>>> Poolstraße 21 
>>> 20335 Hamburg 
>>> Germany 
>>>
>>> https://www.graylog.com 
>>>
>>> Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175 
>>> Geschäftsführer: Lennart Koopmann (CEO) 
>>>
>> -- 
>> You received this message because you are subscribed to the Google Groups 
>> "Graylog Users" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to [email protected] <javascript:>.
>> To view this discussion on the web visit 
>> https://groups.google.com/d/msgid/graylog2/01cec372-9351-406d-a6e9-0edecb41d2e5%40googlegroups.com
>>  
>> <https://groups.google.com/d/msgid/graylog2/01cec372-9351-406d-a6e9-0edecb41d2e5%40googlegroups.com?utm_medium=email&utm_source=footer>
>> .
>>
>> For more options, visit https://groups.google.com/d/optout.
>>
>
>
>
> -- 
> Developer
>
> Tel.: +49 (0)40 609 452 077
> Fax.: +49 (0)40 609 452 078
>
> TORCH GmbH - A Graylog Company
> Poolstraße 21
> 20335 Hamburg
> Germany
>
> https://www.graylog.com <https://www.torch.sh/>
>
> Commercial Reg. (Registergericht): Amtsgericht Hamburg, HRB 125175
> Geschäftsführer: Lennart Koopmann (CEO)
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/55816521-636b-42c0-b711-08daf6e9c136%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to