graylog-plugin-pipeline-processor

graylog-plugin-pipeline-processor copied to clipboard

Pipeline simulator is too technical (wrong level of abstraction)

3

The pipeline simulator is too technical for most users and requires intimate knowledge of Graylog's internals to use. A normal user without deep knowledge of Graylog's internals such as the...

joschi

Bumps [junit](https://github.com/junit-team/junit4) from 4.12 to 4.13.1. Release notes Sourced from junit's releases. JUnit 4.13.1 Please refer to the release notes for details. JUnit 4.13 Please refer to the release notes...

dependabot[bot]

cidr_match in lookup tables

2

It would be useful to have the ability to perform a cidr_match on the keys of a lookup table. The goal would be to look up a specific IP in...

brucegivens

Support different abbreviation characters

1

Currently, the `abbreviate()` function takes two parameters: Parameter | Type | Required | Description -- | -- | -- | -- value | String | x | The string to...

lennartkoopmann

### Problem description When I add read permission for particular Pipeline connection to role by REST API, user with that role isn't able to manage this Pipelines. Page http://:9000/system/pipelines isn't...

valihanov

### Problem description When I add read permission for particular Pipeline rule to role by REST API, user with that role isn't able to manage this Pipeline rule. Page http://:9000/system/pipelines/rules...

valihanov

No information about rules errors

3

### Problem description  While the Graylog web interface provides some information about the error rate an individual rule produces, there's no way to find out what kind...

joschi

Using `parse_date` is the only option to use if you have to work with exact times. `flex_parse_date` would could of provided micro seconds. Having the option to provide multiple pattern...

jalogisch

parse_date throws exception on error

4

When using the `parse_date` function the rule will exit with an exception if the parse_date does not work. ### Backround `parse_date` could be used in the `when` part of the...

jalogisch

Function to DNS resolve field content

11

I could really use a DNS resolver function for our rule processing, something like: ``` let name = resolve_field(to_string($message.ip_field)) set_field("dns_name", name); ``` ... would be awesome :)

henrikjohansen