Hi Filippo, you can assign index sets to streams, not to inputs. If you want to store all messages of a particular input into specific indices, you'll have to create a stream for these inputs (e. g. by creating a stream rule using the gl2_source_input message field).
Cheers, Jochen On Thursday, 15 December 2016 07:22:03 UTC+1, Filippo Balicchia wrote: > > Hi, > I starting to check Graylog v2.2.0-beta.2 and I don't understand how use > new Improved retention feature. > As I have interpreted this feature is possible to link a particular input > for example (Syslog, application log, flowlogs ecc.ecc) to a specific index. > > For example after create syslog-index I try to save data coming from > syslog input to the new index but I can't figure out to do that. > I try to search a possible configuration in both side from input side and > indexes side but nothing. > > Do I misundestaning this feature or it is mine misconfiguration ? > > Thanks for help > > --Filippo > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/0d9aa1fc-b22f-426d-8309-658576bdfe84%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
