By the way, I got a little ahead of myself in the previous post. In
particular:
"settings" : {
"index.mapping.ignore_malformed" : true*,*
*"index.query.default_field" : "message"*
},
Apparently, when added the setting above in red, and then removed the
following option from my ES 1.2.1 start-up script, Kibana was no longer
able to search on HTTP and it required message:HTTP because the _all field
has also been disabled:
-Des.index.query.default_field=message
So I put the configuration option (above) back into my ES start-up script,
and removed the index configuration option in red above (as it didn't seem
to work). Not sure if this is a problem with my understanding (most likely)
or a bug in ES (very unlikely). But I offer it to the experts for comment
and correction.
But however it should be, ES rocks and I've managed to get several people
up and running with a one-button (as it were) build, install, load, and
test. Awesome job, Elasticsearch.com! You make me look good!
Brian
--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/d68e3db5-e651-4e57-85b8-fea70a5e8de9%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
