Hi Rui, unfortunately that's currently not possible in Graylog by using extractors. You could use Drools to rewrite your messages accordingly (see http://docs.graylog.org/en/1.3/pages/drools.html for details) but that introduces a whole lot of other problems.
Cheers, Jochen On Wednesday, 24 February 2016 16:07:19 UTC+1, Rui Goncalves wrote: > > Hi all. > > I would like to prevent “fullyCutByExtractor” fields from being indexed > into elasticsearch. I just want to rename a few fields from an incoming > JSON in a RAW input and convert them to correct type. > > Is that possible? > > Thanks. > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/fb1dfbac-297a-4c79-934d-5651758abe64%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
