Hi Jason, we might add an interface for managing Elasticsearch mappings/index templates in a future version of Graylog, but right now it's not on the immediate roadmap.
Cheers, Jochen On Wednesday, 13 April 2016 22:07:53 UTC+2, Jason Haar wrote: > > It would be great if graylog had an interface for doing this. I don't know > if this is the intent, but graylog sort of "hides" ES almost entirely, so > being able to use graylog to redefine field names would be useful and in > keeping with that concept (it would obviously just be a wrapper around the > actual ES template) > > Good timing on this topic. I've just adding a new GELF feed of data > containing a "lastSeen" field and was wondering how to make it a field like > "timestamp". Now I know ;-) > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/5d39bb2d-1f1b-4a3c-93a7-3e29b0a6ffb7%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
