Hi, On Thursday, 13 October 2016 20:35:53 UTC+2, fxp wrote: > > Question is why is this json extractor not working as intended? >
Graylog converts dots in field names automatically to underscores to cater to a restriction of Elasticsearch 2.x: https://www.elastic.co/guide/en/elasticsearch/reference/2.4/dots-in-names.html Cheers, Jochen -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/97819d1a-d224-4523-af38-25d926c1c5cd%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.