Hi,

I used gelf input with previous releases (0.9.x and 0.12.x) and I needed to
search with underscore in universal search bar. So I thought its the same
with 0.20.x.

And I mean "New 0.20.x does now store extracted fields *without* an
underscore (_)." Sorry for confusion :)

Thanks.


On Fri, Jan 24, 2014 at 12:41 PM, Kay Röpke <[email protected]> wrote:

> Hi!
>
> The GELF spec says to prefix additional fields with an underscore,
> http://graylog2.org/gelf#specs, yes.
> When searching you simply omit the underscore, they are simply an artifact
> of the transport mechanism during sending.
> The graylog2 server removes the underscore when storing the message what
> gives you the idea that the underscore is stored?
>
> Best,
> Kay
>
> On Friday, January 24, 2014 9:43:45 AM UTC+1, Rahman Duran wrote:
>>
>> Hi,
>>
>> New 0.20.x does now store extracted fields with an underscore (_). So
>> what is the status of gelf input additional fields? Does it still uses "_"
>> for additional fileds? If yes then how does 0.20.x handle the searches? Do
>> we need to search with underscore or not?
>>
>  --
> You received this message because you are subscribed to a topic in the
> Google Groups "graylog2" group.
> To unsubscribe from this topic, visit
> https://groups.google.com/d/topic/graylog2/EMGhgOseZzQ/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to
> [email protected].
> For more options, visit https://groups.google.com/groups/opt_out.
>



-- 
Rahman Duran
Artvin Çoruh Üniversitesi, Bilgi İşlem Daire Başkanlığı
[email protected]
[email protected]
Tel: 0 466 215 10 00 - 1076

-- 
You received this message because you are subscribed to the Google Groups 
"graylog2" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to