Hello,
I did, and that didn't help with the problem I'm having here unfortunately.
I have managed to convert one field at a time by creating a nex template
like this :
{
"order": 0,
"template": "graylog_*",
"settings": {},
"mappings": {
"message": {
"properties": {
*"rp_ip_geolocation": *{
"type": "geo_point"
}
}
}
},
"aliases": {}
}
Problem is that it would be really unpractical to have to add a specific
name in the template and cycle an index each time we would have a new
geolocation field.
Have tried to do a template with a dynamic field too :
{
"order": 0,
"template": "graylog_*",
"settings": {},
"mappings": {
"message": {
"dynamic_templates": [
{
"geo": {
"mapping": {
"type": "geo_point"
},
"match": "*_geolocation"
}
}
]
}
},
"aliases": {}
}
Regards.
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/b69cb95a-3da7-4902-bd24-049a114c9cf6%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
