No one? :(

On Friday, January 6, 2017 at 6:24:18 PM UTC+1, Frank wrote:
>
> Thanks for your reply, but that's not what I'm trying to do.
>
> I've got a pipeline with some rules that add some fields and remove some 
> fields.
> The pipeline is connected to a custom stream, not the default stream.
> But so far everything is ok. In the stream the messages look exactly like 
> they should:
> The extra fields are added, and the unneeded ones are removed.
>
> This stream is connected to a syslog output which sends the messages to a 
> remote syslog server.
> But on this syslog server the messages don't arrive like they should.
> In the syslog output plugin in you can set the message format to plain or 
> full.
> If set to plain, just the unwanted fields are removed, but the extra ones 
> are not added.
> If set to full, the extra fields are shown, but also everything else, 
> including the fields that should be removed.
>
>
> On Friday, January 6, 2017 at 5:41:10 PM UTC+1, [email protected] wrote:
>>
>>
>>
>> On Friday, January 6, 2017 at 6:33:17 AM UTC-6, Frank wrote:
>>>
>>> <snip>
>>> Plain shows the message without the fields that should be removed, but 
>>> also without the added custom fields.
>>> Full and structured show the message with the custom fields, but also 
>>> with all fields that should be removed.
>>>
>>>
>> Not sure I understand the question but I wasn't able to get my custom 
>> fields to show up in any searches unless I put all my pipelines on the 
>> "Default Stream" under System/Pipelines > Pipelines (Default Stream) > Add 
>> new Connection/ Edit Connections.  This doesn't seem to be the way I 
>> understood things to work but it's working. Maybe it's because I have one 
>> syslog listener on my graylog server with multiple machines logging to it 
>> don't know. Hope it helps.
>>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/19f48c41-b350-4f5f-bc78-ac3c42a279a1%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to