Hi Miguel, 1. Since I have 3 logs types (for now, more will be added) coming through > the same input, do I apply all the extractors to that 1 gelf input? > Yes, you can add all extractors to that single GELF input. Alternatively you can create a "specialized" GELF input with the necessary extractors for each service type you want to support, but that's not really necessary.
> 2. Will that affect responsiveness of the searches? > No. The messages will only be processed before they are being indexed by Elasticsearch. Running seaches with Graylog2 will be just as fast as without using the extractors. Cheers, Jochen -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
