use decompress_gzip_field to decompress the gz compressed package, but the information received in Graylog was garbled #42273
Labels
needs_team
Indicates that the issue/PR needs a Team:* label
I tried to use decompress_gzip_field to decompress the gz compressed package and forward it to Graylog, but the information received in Graylog was garbled.How can I do it?
================================= Processors =================================
processors:
#- decompress_gzip_field:
field: ["message"]
when.not.contains.tags: forwarded
The text was updated successfully, but these errors were encountered: