Hello, Should this value be "INTEGER" or something else ? How can I change it ?
2016-01-19 14:45 GMT+01:00 Jean-Luc Bassereau <[email protected]>: > Hello, > > Thanks for your answer. > I'm running the last version of Graylog : > graylog-server-1.3.3-1.noarch > graylog-web-1.3.3-1.noarch > > On a RHEL6 server. > > This is what I can check about this field ES Mapping : > "NResults":{"type":"string","index":"not_analyzed"} > > > And I have nothing on logs (server and web interface). > > > > Cheers. > > > 2016-01-19 14:20 GMT+01:00 Edmundo Alvarez <[email protected]>: > >> Hi Jean-Luc, >> >> Which Graylog version are you running? Please share with us any errors >> appearing in your Graylog server logs, Graylog web interface logs and in >> your browser's console while trying to add the graph, otherwise we can't >> know what is wrong. >> >> You could also check the Elasticsearch mappings as Mathieu suggested, you >> can find more information about it: >> https://www.elastic.co/guide/en/elasticsearch/reference/1.7/mapping.html >> >> https://www.elastic.co/guide/en/elasticsearch/reference/1.7/indices-get-field-mapping.html >> >> Regards, >> >> Edmundo >> >> > On 19 Jan 2016, at 14:05, Jean-Luc Bassereau <[email protected]> >> wrote: >> > >> > Hello, >> > >> > I have no idea how to check this on ES side. >> > For info, I'm shipping datas from a csv file through logstash with this >> conf (should I do something on this side ?) : >> > >> > input { >> > file { >> > codec => plain{ >> > charset => "UTF-8" >> > } >> > path => ["/tmp/search.csv"] >> > start_position => "beginning" >> > } >> > } >> > >> > filter { >> > >> > csv { >> > columns => >> ["datelog","ClientIP","SearchLogic","SearchTarget","Query","Language","Start >> Offset","Hits","RefinementList","RefinementListLength","LastRefinement","LastRefinementAction","NResults","NResultsAvailable","TimeIndex","TimeTotalSearchMicro"] >> > separator => ";" >> > >> > } >> > >> > date { >> > >> > match => [ "datelog", "YYYY/mm/dd HH:mm:ss" ] >> > timezone => "UTC" >> > } >> > >> > >> > >> > } >> > >> > >> > output { >> > gelf { >> > host => "SPAR-LOG-GELF-UDP" >> > port => 12201 >> > } >> > } >> > >> > 2016-01-19 12:05 GMT+01:00 Grzybek Mathieu CNE (GAE BCQ STIG CTGN) < >> [email protected]>: >> > Hi Jean-Luc, >> > >> > What about your field mapping in elasticsearch ? Is it a numeric type ? >> > >> > Mathieu >> > >> > >> > Le 19/01/2016 12:00, Jean-Luc Bassereau a écrit : >> >> Hello, >> >> >> >> I'm trying to generate charts from numeric datas. >> >> Field called "NBresults" contains numeric datas : >> >> >> >> <Mail Attachment.png> >> >> >> >> When I click on "Genchart" : >> >> <Mail Attachment.png> >> >> >> >> I have this endless animation without error but without result : >> >> <Mail Attachment.png> >> >> >> >> Any idea ? >> >> >> >> >> >> -- >> >> Cheers, >> >> Jean-Luc Bassereau >> >> -- >> >> You received this message because you are subscribed to the Google >> Groups "Graylog Users" group. >> >> To unsubscribe from this group and stop receiving emails from it, send >> an email to [email protected]. >> >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/graylog2/CAEoVnxZRMD6ZdOtaC1g--e%3D%2BwxdqLGD%3DnHW5J1Oh1FLjDjd4hg%40mail.gmail.com >> . >> >> For more options, visit https://groups.google.com/d/optout. >> > >> > -- >> > Le capitaine Mathieu GRZYBEK >> > COMSOPGN / STIG / BCQ / GAE >> > Fort de Rosny >> > Avenue Théophile Sueur >> > 93111 Rosny-sous-Bois Cedex >> > France >> > Tel: +33 (0) 158 665 225 >> > >> > >> > -- >> > You received this message because you are subscribed to the Google >> Groups "Graylog Users" group. >> > To unsubscribe from this group and stop receiving emails from it, send >> an email to [email protected]. >> > To view this discussion on the web visit >> https://groups.google.com/d/msgid/graylog2/569E187F.4030204%40gendarmerie.interieur.gouv.fr >> . >> > For more options, visit https://groups.google.com/d/optout. >> > >> > Ce message électronique et tous les fichiers attachés qu'il contient >> sont confidentiels et destinés exclusivement à l'usage de la personne à >> laquelle ils sont adressés. Si vous avez reçu ce message par erreur, merci >> de le retourner à son émetteur. La publication, l'usage, la distribution, >> l'impression ou la copie non autorisée de ce message et des attachements >> qu'il contient sont strictement interdits. >> > >> > En cas d'urgence, composez le 17 ou le 112. >> > Afin de contribuer au respect de l'environnement, merci de n'imprimer >> cet e-mail qu'en cas de necessite. >> > >> > This e-mail and any files transmitted with it are confidential and >> intended solely for the use of the individual to whom it is addressed. If >> you have received this email in error please send it back to the person >> that sent it to you. Unauthorized publication, use, dissemination, >> forwarding, printing or copying of this email and its associated >> attachments is strictly prohibited. >> > >> > In case of emergency, dial number 17 or 112. >> > To contribute to the environmental protection, please print this e-mail >> only if necessary. >> > >> > -- >> > You received this message because you are subscribed to the Google >> Groups "Graylog Users" group. >> > To unsubscribe from this group and stop receiving emails from it, send >> an email to [email protected]. >> > To view this discussion on the web visit >> https://groups.google.com/d/msgid/graylog2/569E187F.4030204%40gendarmerie.interieur.gouv.fr >> . >> > For more options, visit https://groups.google.com/d/optout. >> > >> > >> > >> > >> > -- >> > Cordialement, >> > Jean-Luc Bassereau >> > >> > -- >> > You received this message because you are subscribed to the Google >> Groups "Graylog Users" group. >> > To unsubscribe from this group and stop receiving emails from it, send >> an email to [email protected]. >> > To view this discussion on the web visit >> https://groups.google.com/d/msgid/graylog2/CAEoVnxZKDoNt0SNGGnOV20SMFxdVK6oe55Q4qdRN%3DCtgaQxfdA%40mail.gmail.com >> . >> > For more options, visit https://groups.google.com/d/optout. >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Graylog Users" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/graylog2/54658D6C-095D-4451-BC1A-7DFC6F9D7A1A%40graylog.com >> . >> For more options, visit https://groups.google.com/d/optout. >> > > > > -- > Cordialement, > Jean-Luc Bassereau > -- Cordialement, Jean-Luc Bassereau -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/CAEoVnxZR%2BVv276nsWRML8Tn%2BO78fPZjiL5x9Quf10Xc%2BYu0M8Q%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
