Hi, On Tuesday, 10 January 2017 09:56:55 UTC+1, Zhiyuan Lei wrote: > > but graylog doesn't have an option to set the pattern. It only can set > elasticsearch_analyzer. >
Correct, but you can use custom index templates for this, see http://docs.graylog.org/en/2.1/pages/configuration/elasticsearch.html#custom-index-mappings for details. > extractors seem not fit with this situation. > In my opinion extractors do exactly fit your use case. Cheers, Jochen -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/461cc90d-816c-46ae-8f6b-644f8cddaec0%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
