No one? :( On Friday, January 6, 2017 at 6:24:18 PM UTC+1, Frank wrote: > > Thanks for your reply, but that's not what I'm trying to do. > > I've got a pipeline with some rules that add some fields and remove some > fields. > The pipeline is connected to a custom stream, not the default stream. > But so far everything is ok. In the stream the messages look exactly like > they should: > The extra fields are added, and the unneeded ones are removed. > > This stream is connected to a syslog output which sends the messages to a > remote syslog server. > But on this syslog server the messages don't arrive like they should. > In the syslog output plugin in you can set the message format to plain or > full. > If set to plain, just the unwanted fields are removed, but the extra ones > are not added. > If set to full, the extra fields are shown, but also everything else, > including the fields that should be removed. > > > On Friday, January 6, 2017 at 5:41:10 PM UTC+1, dhe...@gmail.com wrote: >> >> >> >> On Friday, January 6, 2017 at 6:33:17 AM UTC-6, Frank wrote: >>> >>> <snip> >>> Plain shows the message without the fields that should be removed, but >>> also without the added custom fields. >>> Full and structured show the message with the custom fields, but also >>> with all fields that should be removed. >>> >>> >> Not sure I understand the question but I wasn't able to get my custom >> fields to show up in any searches unless I put all my pipelines on the >> "Default Stream" under System/Pipelines > Pipelines (Default Stream) > Add >> new Connection/ Edit Connections. This doesn't seem to be the way I >> understood things to work but it's working. Maybe it's because I have one >> syslog listener on my graylog server with multiple machines logging to it >> don't know. Hope it helps. >> >
-- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/19f48c41-b350-4f5f-bc78-ac3c42a279a1%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
