0

I am receiving a message in Graylog which is very long, and would like to split it up in an extractor. I can use the "Replace with regular expression" extractor to replace certain tokens with other symbols (including \n, \\n, <br />, etc) but in the /search view the field is always rendered in a single line with those characters escaped.

Is there a way to render a field populated with an extractor as multiple lines in Graylog2? Or is the only way to send the message as multi-line from the source?

kiko
  • 180
  • 1
  • 8
  • Just found https://github.com/Graylog2/graylog2-server/issues/5225 that suggests it's not possible. – kiko Oct 21 '18 at 18:13
  • See also https://stackoverflow.com/questions/37468166/regex-for-creating-a-new-line – kiko Oct 21 '18 at 18:14

0 Answers0