Hi Rayees, On Wednesday, 8 February 2017 17:38:56 UTC+1, Rayees Namathponnan wrote: > > Suppose i have defined 10 extractors and if any messages comes to graylog > this go trough all the 10 extractors ? >
This depends on your configuration and if the preconditions for these extractors have been met, but it's possible that all 10 extractors have to run for each message. I am performing some test in graylog and see how graylog behave if i add > more extractor, and want to check alert performance wrt to number of > extractor > Usually you would create multiple inputs for messages with vastly different requirements to run extractors, so that not all extractors have to run for all ingested messages. Cheers, Jochen -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/01c71c04-d8bd-4283-ac8e-16f6926932a2%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
