Are there any errors or related log messages in the graylog server log?
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to graylog2+unsubscr...@googlegroups.com.
It seems these drools rules have stopped working after one of the recent
upgrades of graylog. I'm on version 1.2 now but I wasn't able to get the
rules working in the last version as well. Any tips?
Here is my rules file:
import org.graylog2.plugin.Message
rule "Drop host dhcpd"
when
Sorry for waking up an older thread... however I have an LDAP server out of
my controller which is absolutely smashing my Graylog servers due to a
misconfigured logging level. Unfortunately the sys admins for this server
are pretty much unresponsive so I think my only choice is to drop this via
http://docs.graylog.org/en/1.0/pages/drools.html
Its somewhat documented. There are a few examples on that page as well but
I wish there were more examples.
Rule documentation here:
http://docs.jboss.org/drools/release/5.5.0.Final/drools-expert-docs/html/ch04.html
It would be cool If graylog2
So this is an undocumented (as of yet) method to have graylog filter an
input as it feeds the elasticsearch index? If I do a search on the graylog
site for drool I get nothing.
On Thursday, April 30, 2015 at 10:43:38 PM UTC-7, temo tsurtsumia wrote:
import org.graylog2.plugin.Message
rule
