Hi Peter, what's the order of message processors in both Graylog instances? You can find it on the System / Configurations page in the Message Processors Configuration section.
Cheers, Jochen On Friday, 20 January 2017 10:46:39 UTC+1, Peter Griggs wrote: > > Hi Jochen, > > On the working box the pipeline is processing and extracting the fields > however on the new setup it isn't. I have the rules, piplelines and streams > setup identically. I am probably missing something stupid but have spent a > couple of days working on it and its starting to bug me. > > Here is an image of a log message which is identical to the one on the > working box however this one isn't processing the rules despite it saying > it is being routed through. > > Cheers > > > <https://lh3.googleusercontent.com/-di4unzpw3QM/WIHcfDrzjsI/AAAAAAAAAQ8/rxUDPsXV5IIQN-GU9gf5V6_PEl00YXcygCLcB/s1600/graylog.png> > Pete. > > On Thursday, 19 January 2017 09:34:34 UTC, Jochen Schalanda wrote: >> >> Hi Peter, >> >> On Thursday, 19 January 2017 10:26:15 UTC+1, Peter Griggs wrote: >>> >>> I have two graylog instances setup (these are separate on separate >>> sites) one works fine the other is a mirror setup however the processing is >>> not working. >>> >> >> What does "is not working" mean exactly? >> >> Are there any error messages? What did you do, what did you expect to >> happen, and what actually happened? >> >> Cheers, >> Jochen >> > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/a460a94f-bf89-40ca-96cb-fd2b8486e00a%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
