when i use this rule
its properly setting the statediff field to $message.state
rule "testing state"
when
($message.source == "ngmp_esme_logs")
then
let x = $message.state;
set_field("statediff",x);
route_to_stream("ngmp state difference");
end
*but when i use this rule pipeline is not setting the statediff field*
rule "testing state"
when
($message.source == "ngmp_esme_logs") && ($message.state == 3032)
then
let x = $message.state;
set_field("statediff",x);
route_to_stream("ngmp state difference");
end
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/224b2b9e-54da-4de6-9837-321d72127907%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
