pfsense-graylog icon indicating copy to clipboard operation
pfsense-graylog copied to clipboard
verified publisher icon devopstales

Extractor conditions not satisfied

Open nautmichio opened this issue 4 years ago • 2 comments

The message field from the input never contains the application_name so the extractor is never executed. In the below example filterlog is not part of the 'message' therefor the extractor is not applied to these items. image

nautmichio avatar Sep 15 '21 14:09 nautmichio

@nautmichio What version of pfsense do you use and what log format?

devopstales avatar Sep 16 '21 18:09 devopstales

pfSense version is 2.5.2-RELEASE (amd64) built on Fri Jul 02 15:33:00 EDT 2021 FreeBSD 12.2-STABLE syslog log format is syslog image

nautmichio avatar Sep 16 '21 19:09 nautmichio