[graylog2] Rewrite log with extractor

[Drew Miranda]

I believe something like this should be possible with drools rules

http://docs.graylog.org/en/1.2/pages/drools.html

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/84003687-af21-4277-8a4b-15dd4e6cb316%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[graylog2] Rewrite log with extractor

[Scarlet Eza]

Dear all,
I have log as format:
 protocol-id 17,..
Now I can use extractor to extract string "17" for using in filed protocol 
or something like that. But I want to change string "17" to "UDP" or when 
when I get string  "1" I can change it to "ICMP"...

Anyone have exp about this, please help me!!!

-- 
You received this message because you are subscribed to the Google Groups 
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/graylog2/eb71c639-5ef6-4752-8d57-d1f9cc7c434e%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.