Hi, On Tuesday, 10 January 2017 09:56:55 UTC+1, Zhiyuan Lei wrote: > > but graylog doesn't have an option to set the pattern. It only can set > elasticsearch_analyzer. >
Correct, but you can use custom index templates for this, see http://docs.graylog.org/en/2.1/pages/configuration/elasticsearch.html#custom-index-mappings for details. > extractors seem not fit with this situation. > In my opinion extractors do exactly fit your use case. Cheers, Jochen -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/461cc90d-816c-46ae-8f6b-644f8cddaec0%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
