Hi Kelli, as I wrote before, Graylog doesn't support multiple indices. There's always exactly one write-active index (pointed to by the deflector alias).
Cheers, Jochen On Friday, 3 June 2016 16:49:23 UTC+2, Kelli Hall wrote: > > Thanks for quick reply. So, I have a CSV file that I want to bring into > Graylog, but Graylog doesn't support CSV. Graylog supports GELF UDP. > Logstash will convert CSV to GELF UDP. So, I'm using Logstash to get the > CSV converted into GELF UDP for import into Graylog, In Graylog, I've set > up a GELF UDP listener. I'm getting the data into Graylog just fine this > way. > > The only problem is: it wants to put it into the default Graylog index. > It won't let me specify a different index to put it in to. I have tried > using the "index => "test" " parameter in my logstash.conf file (I've seen > other bloggers use this), but it won't recognize the parameter. Is this a > version issue? Am I not using the right parameter? > > Thanks again for the help!! > > > > On Friday, June 3, 2016 at 10:20:12 AM UTC-4, Kelli Hall wrote: > >> Using Logstash 2.3.2, Graylog 1.3 and Elasticsearch 1.7.5. >> >> I have followed the sample scripts posted on Internet and use "index => >> test" as a parameter in the output section of my logstash.conf file. >> >> It gives me an error saying it doesn't recognize "index" as a parameter. >> Ok, but then how can I get my csv file (being converted to GELF via UDP) to >> go into a specific index (instead of the default index). >> >> Any help you can give a Graylog/Elasticsearch newbie would be greatly >> appreciated!! >> >> Thanks, >> Kelli >> >> -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/57e39b31-cfe2-4bd3-b0b7-2f41de36b0ff%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
