Hi Jason, we might add an interface for managing Elasticsearch mappings/index templates in a future version of Graylog, but right now it's not on the immediate roadmap.
Cheers, Jochen On Wednesday, 13 April 2016 22:07:53 UTC+2, Jason Haar wrote: > > It would be great if graylog had an interface for doing this. I don't know > if this is the intent, but graylog sort of "hides" ES almost entirely, so > being able to use graylog to redefine field names would be useful and in > keeping with that concept (it would obviously just be a wrapper around the > actual ES template) > > Good timing on this topic. I've just adding a new GELF feed of data > containing a "lastSeen" field and was wondering how to make it a field like > "timestamp". Now I know ;-) > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/5d39bb2d-1f1b-4a3c-93a7-3e29b0a6ffb7%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
