Re: [graylog2] regex.groups in Pipeline rule function

2016-06-22 Thread John Munro
Thank you so much Edmundo. I had been looking high and low for such an example. On Wednesday, June 22, 2016 at 6:27:59 PM UTC+9, Edmundo Alvarez wrote: > > Hi John, > > Looking at this example [1], I think you can access the groups returned by > the regex function by using `location["lat"]`

Re: [graylog2] regex.groups in Pipeline rule function

2016-06-22 Thread Edmundo Alvarez
Hi John, Looking at this example [1], I think you can access the groups returned by the regex function by using `location["lat"]` and `location["long"]`. 1:

[graylog2] regex.groups in Pipeline rule function

2016-06-22 Thread John Munro
I cannot find the group return from the regex function. Where am I going wrong? rule "function add_latlong" when has_field("Remote_IP_geolocation") then // extract the latitude and longitude let location = regex("(-?\\d+\\.\\d+),(-?\\d+\\.\\d+)",to_string($message.