I added new templates mygraylog and mygraylog2.
curl -X GET 'http://localhost:9200/_template?pretty' returns
http://pastebin.com/qnweRuqb
After that I cretated new fields ipt2323 and ipt2301. It doesn't work for
me
"ipt2301" : {
"type" : "string",
"index" : "not_analyzed"
},
"ipt2323" : {
"type" : "string",
"index" : "not_analyzed"
},
curl -X GET 'http://localhost:9200/graylog2_0?pretty'
http://pastebin.com/dkaFZq3A
What am I missing ?
вторник, 6 сентября 2016 г., 19:35:59 UTC+3 пользователь Jochen Schalanda
написал:
>
> Hi,
>
> you can simply create your own index mapping and put it into a custom
> index template to achieve this. The Graylog index template has the lowest
> priority ("order") and any other index template can override its settings.
>
> See
> https://www.elastic.co/guide/en/elasticsearch/reference/2.3/mapping.html
> and
> https://www.elastic.co/guide/en/elasticsearch/reference/2.3/indices-templates.html
>
> for details.
>
> Cheers,
> Jochen
>
> On Tuesday, 6 September 2016 17:20:17 UTC+2, SancheZZS wrote:
>>
>> Hello!
>> After first run graylog2 I have defaut template in Elasticsearch
>> curl -X GET 'http://loclahost:9200/_template?pretty'
>> http://pastebin.com/e5LPiGzC
>>
>> How to change mapping in "dynamic_templates" and "store_generic" from
>> "index" : "not_analyzed" to
>>
>> "analyzer" : "standard",
>> "index" : "analyzed",
>> "type" : "string"
>> ?
>>
>> I want that any new field, created in web interface, must have "index" :
>> "analyzed". By default they have
>> "index" : "not_analyzed",
>> "type" : "string"
>>
>> Any advice is greatly appreciated.
>>
>>
>>
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/cf26694b-fdd0-4380-8f77-256deb5e141b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
