Hello
I was playing with snmp some time ago, it created multiple* fields with
dots*. Now new ES doesn't support dots in fields names so I cannot upgrade
to graylog 2.0. Messages with those fields contain* no valuable data*, so
I'd like to *delete *them from few past indices (yes, I know, I have to *unlock
*them first). Is there any ES magic i can use to do this semi-automatically
or i have to parse mapping json for fields (this is `jq` query I came up
with for now:
`.graylog_158.mappings.message.properties|keys|map(match(".*\\..*"))[].string`)
and delete every message containing fields parsing spits out? (_exists_:
doesn't seems to work with wildcards)
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/dffbea9a-f98c-4090-940e-c0c6e5f0550a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
