I use elasticsearch_analyzer = standard in my graylog,and I have a message like this
2017-01-09 20:02:50,197 [x/x] - [(x,aa.bb,Y,645810f41483963370181610719839,1ms)] Expected Behavior expcected all terms like Field terms: xxx Y 645810f41483963370181610719839 1ms the last comma should spit the last words. Current Behavior Field terms: xxx Y 645810f41483963370181610719839,1ms but last words 645810f41483963370181610719839,1ms was not splited. maybe I can set stopwords to solve this problem, according this https://www.elastic.co/guide/en/elasticsearch/reference/2.3/analysis.html does anyone have an idea? -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/fdd519af-595e-4cf0-975b-0fb794497ce4%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
