Hi Evgeny, I think your problem is highly related to my previous problem with AMQP input: https://groups.google.com/forum/#!topic/graylog2/MvRvF9V98hY Maybe you could try this as well. How do you produce your messages? Logstash and Filebeat for example populate the source field by default.
Cheers, Carlos -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/f9a8fb19-3400-419b-9e87-09f0832f5465%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
