Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Use Event Fields instead of Split fields #101

Open
frantz45 opened this issue Nov 28, 2022 · 1 comment
Open

Use Event Fields instead of Split fields #101

frantz45 opened this issue Nov 28, 2022 · 1 comment

Comments

@frantz45
Copy link
Collaborator

When we created the LoggingAlert plugin we implemented split fields to merge/split alerts based on fields value because Graylog had no equivalent.
But now Graylog allows to set Event Fields in en Event Definition and some of these fields can be choosen as primary keys to split alerts.
We should POC this feature first to be sure it answers our purpose.
@frantz45
Copy link
Collaborator Author

I think "Group-by" fields are sufficient

@frantz45 frantz45 mentioned this issue Jan 17, 2024
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@frantz45