Hello,
Thanks for your answer.
I'm running the last version of Graylog :
graylog-server-1.3.3-1.noarch
graylog-web-1.3.3-1.noarch
On a RHEL6 server.
This is what I can check about this field ES Mapping :
"NResults":{"type":"string","index":"not_analyzed"}
And I have nothing on logs (server and web interface).
Cheers.
2016-01-19 14:20 GMT+01:00 Edmundo Alvarez <[email protected]>:
> Hi Jean-Luc,
>
> Which Graylog version are you running? Please share with us any errors
> appearing in your Graylog server logs, Graylog web interface logs and in
> your browser's console while trying to add the graph, otherwise we can't
> know what is wrong.
>
> You could also check the Elasticsearch mappings as Mathieu suggested, you
> can find more information about it:
> https://www.elastic.co/guide/en/elasticsearch/reference/1.7/mapping.html
>
> https://www.elastic.co/guide/en/elasticsearch/reference/1.7/indices-get-field-mapping.html
>
> Regards,
>
> Edmundo
>
> > On 19 Jan 2016, at 14:05, Jean-Luc Bassereau <[email protected]>
> wrote:
> >
> > Hello,
> >
> > I have no idea how to check this on ES side.
> > For info, I'm shipping datas from a csv file through logstash with this
> conf (should I do something on this side ?) :
> >
> > input {
> > file {
> > codec => plain{
> > charset => "UTF-8"
> > }
> > path => ["/tmp/search.csv"]
> > start_position => "beginning"
> > }
> > }
> >
> > filter {
> >
> > csv {
> > columns =>
> ["datelog","ClientIP","SearchLogic","SearchTarget","Query","Language","Start
> Offset","Hits","RefinementList","RefinementListLength","LastRefinement","LastRefinementAction","NResults","NResultsAvailable","TimeIndex","TimeTotalSearchMicro"]
> > separator => ";"
> >
> > }
> >
> > date {
> >
> > match => [ "datelog", "YYYY/mm/dd HH:mm:ss" ]
> > timezone => "UTC"
> > }
> >
> >
> >
> > }
> >
> >
> > output {
> > gelf {
> > host => "SPAR-LOG-GELF-UDP"
> > port => 12201
> > }
> > }
> >
> > 2016-01-19 12:05 GMT+01:00 Grzybek Mathieu CNE (GAE BCQ STIG CTGN) <
> [email protected]>:
> > Hi Jean-Luc,
> >
> > What about your field mapping in elasticsearch ? Is it a numeric type ?
> >
> > Mathieu
> >
> >
> > Le 19/01/2016 12:00, Jean-Luc Bassereau a écrit :
> >> Hello,
> >>
> >> I'm trying to generate charts from numeric datas.
> >> Field called "NBresults" contains numeric datas :
> >>
> >> <Mail Attachment.png>
> >>
> >> When I click on "Genchart" :
> >> <Mail Attachment.png>
> >>
> >> I have this endless animation without error but without result :
> >> <Mail Attachment.png>
> >>
> >> Any idea ?
> >>
> >>
> >> --
> >> Cheers,
> >> Jean-Luc Bassereau
> >> --
> >> You received this message because you are subscribed to the Google
> Groups "Graylog Users" group.
> >> To unsubscribe from this group and stop receiving emails from it, send
> an email to [email protected].
> >> To view this discussion on the web visit
> https://groups.google.com/d/msgid/graylog2/CAEoVnxZRMD6ZdOtaC1g--e%3D%2BwxdqLGD%3DnHW5J1Oh1FLjDjd4hg%40mail.gmail.com
> .
> >> For more options, visit https://groups.google.com/d/optout.
> >
> > --
> > Le capitaine Mathieu GRZYBEK
> > COMSOPGN / STIG / BCQ / GAE
> > Fort de Rosny
> > Avenue Théophile Sueur
> > 93111 Rosny-sous-Bois Cedex
> > France
> > Tel: +33 (0) 158 665 225
> >
> >
> > --
> > You received this message because you are subscribed to the Google
> Groups "Graylog Users" group.
> > To unsubscribe from this group and stop receiving emails from it, send
> an email to [email protected].
> > To view this discussion on the web visit
> https://groups.google.com/d/msgid/graylog2/569E187F.4030204%40gendarmerie.interieur.gouv.fr
> .
> > For more options, visit https://groups.google.com/d/optout.
> >
> > Ce message électronique et tous les fichiers attachés qu'il contient
> sont confidentiels et destinés exclusivement à l'usage de la personne à
> laquelle ils sont adressés. Si vous avez reçu ce message par erreur, merci
> de le retourner à son émetteur. La publication, l'usage, la distribution,
> l'impression ou la copie non autorisée de ce message et des attachements
> qu'il contient sont strictement interdits.
> >
> > En cas d'urgence, composez le 17 ou le 112.
> > Afin de contribuer au respect de l'environnement, merci de n'imprimer
> cet e-mail qu'en cas de necessite.
> >
> > This e-mail and any files transmitted with it are confidential and
> intended solely for the use of the individual to whom it is addressed. If
> you have received this email in error please send it back to the person
> that sent it to you. Unauthorized publication, use, dissemination,
> forwarding, printing or copying of this email and its associated
> attachments is strictly prohibited.
> >
> > In case of emergency, dial number 17 or 112.
> > To contribute to the environmental protection, please print this e-mail
> only if necessary.
> >
> > --
> > You received this message because you are subscribed to the Google
> Groups "Graylog Users" group.
> > To unsubscribe from this group and stop receiving emails from it, send
> an email to [email protected].
> > To view this discussion on the web visit
> https://groups.google.com/d/msgid/graylog2/569E187F.4030204%40gendarmerie.interieur.gouv.fr
> .
> > For more options, visit https://groups.google.com/d/optout.
> >
> >
> >
> >
> > --
> > Cordialement,
> > Jean-Luc Bassereau
> >
> > --
> > You received this message because you are subscribed to the Google
> Groups "Graylog Users" group.
> > To unsubscribe from this group and stop receiving emails from it, send
> an email to [email protected].
> > To view this discussion on the web visit
> https://groups.google.com/d/msgid/graylog2/CAEoVnxZKDoNt0SNGGnOV20SMFxdVK6oe55Q4qdRN%3DCtgaQxfdA%40mail.gmail.com
> .
> > For more options, visit https://groups.google.com/d/optout.
>
> --
> You received this message because you are subscribed to the Google Groups
> "Graylog Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/graylog2/54658D6C-095D-4451-BC1A-7DFC6F9D7A1A%40graylog.com
> .
> For more options, visit https://groups.google.com/d/optout.
>
--
Cordialement,
Jean-Luc Bassereau
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/CAEoVnxa-CwD3oYqB4z7F71dFM-fEaJK%2Bm1ChEwLssc4mjeRgEQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.