http://docs.graylog.org/en/2.1/pages/configuration/elasticsearch.html#custom-index-mappings Custom index mappings can be helpful, but it may be too complicated as we do not know what other colleagues would send to graylog.
On Sunday, October 16, 2016 at 8:17:19 PM UTC+8, Huang Chiming wrote: > > Is it possible to disable indexing on the fields that are large than, say, > 1024 bytes? But still, those fields should be stored in ES. > > Thank you for help! > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/5829938f-ad20-4137-ada2-cfaa5d49ab0a%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
