Skip to content

Instantly share code, notes, and snippets.

@lennartkoopmann

lennartkoopmann/gist:8915780

Last active August 29, 2015 13:56
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save lennartkoopmann/8915780 to your computer and use it in GitHub Desktop.
Save lennartkoopmann/8915780 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
import org.graylog2.plugin.Message
rule "reproduce IRC issue"
when
m : Message( getField("message") matches "(?i).*mycrazystringtotrack(.|\n|\r)*" )
then
m.addField("track", "crazystring" );
System.out.println("matched!");
end
Raw
gistfile2.txt
lennart ~/workspace/graylog2/graylog2-web-interface(play)$ nc -u localhost 5514
<5>Feb 10 14:17:39 sundaysister login[20370]: USER_PROCESS: 20370 mycrazystringtotrack ttys00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment