Skip to main content
Sumo Logic

Configure Processing Rules for Data Forwarding

Before you begin, make sure you've set up Data Forwarding destinations.

  1. Go to Manage > Collection > Collection (Manage > Collection and click Collectors and Sources in the classic UI).
  2. Search for the source that you want to configure, and click the Edit link for the source.
    The source must be associated with an installed collector.
  3. Scroll down to the Processing Rules section and click the arrow to expand the section.
  4. Click Add Rule.
  5. Enter a name to define the rule.
  6. In the Filter field, enter the regular expression that determines how the rule is applied. For example, the regular expression ,*ERROR*, matches all messages that contain ERROR.
  7. Select Forward messages that match as the rule type. This option is visible only if you have defined Data Forwarding destinations.
  8. Select the Destination from the drop-down menu. The menu is populated with the destinations that were previously added.
  9. Click Apply.
  10. Click to add any additional rules.
    The added rule is listed along with any other previously defined processing rules. See Create A Processing Rule for more information.
  11. Click Save to save all of the rules you defined and start forwarding data that matches the rules.
  12. Configure additional sources as needed.