Hi, I starting to check Graylog v2.2.0-beta.2 and I don't understand how use new Improved retention feature. As I have interpreted this feature is possible to link a particular input for example (Syslog, application log, flowlogs ecc.ecc) to a specific index.
For example after create syslog-index I try to save data coming from syslog input to the new index but I can't figure out to do that. I try to search a possible configuration in both side from input side and indexes side but nothing. Do I misundestaning this feature or it is mine misconfiguration ? Thanks for help --Filippo -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/13356b77-418e-47ec-8e8e-e0c386150175%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
