Hi Rui,
On Tuesday, 14 February 2017 16:24:55 UTC+1, Rui Goncalves wrote:
>
> What am I missing? I think there must be something that I'm missing,
> because we can route the same message to multiple streams.
>
This sounds like an incorrect message processor order. Check the order of
your
Thanks Jochen.
I'm looking at graylog pipelines docs, but I think I'm really confused :-/
I've created a pipeline with one rule that extracts key=value pairs:
rule "Extract K=V"
when true
then
set_fields(key_value(to_string($message.message)));
end
Then I've created a stream of messages,
Hi Rui,
On Tuesday, 14 February 2017 13:15:13 UTC+1, Rui Goncalves wrote:
>
> Why it's not possible to remove a field from the received message using
> extractors?
>
This was a deliberate decision at the time to prevent people from wondering
why some field didn't exist anymore due to stacked
