Hi, On Thursday, 13 October 2016 20:35:53 UTC+2, fxp wrote: > > Question is why is this json extractor not working as intended? >
Graylog converts dots in field names automatically to underscores to cater to a restriction of Elasticsearch 2.x: https://www.elastic.co/guide/en/elasticsearch/reference/2.4/dots-in-names.html Cheers, Jochen -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/97819d1a-d224-4523-af38-25d926c1c5cd%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
