Hi Tom, On Tuesday, 24 January 2017 14:49:58 UTC+1, Tom Powers wrote: > > The rule only seems to give me the one category/operator/criteria choice > per rule. So in the search above....what would the rule structure look like > to get the same result? >
You can use multiple rules per stream and either require only 1 of them match (OR) or all of them match (AND) for a message to be sent into that stream. Unfortunately it's currently not possible* to combine stream rules with different logical operators. *: You can use the message processing pipelines to formulate arbitrary rules: http://docs.graylog.org/en/2.1/pages/pipelines.html Cheers, Jochen > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/93baed2d-24b5-4630-ac6e-209b9aa96d1e%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
