haha, the template I created has an order 0, default template is -nnnnn, so they are combined.
Still Thank you~~ Let me keep trying~ 在 2017年1月10日星期二 UTC+8下午10:19:38,Jochen Schalanda写道: > > Hi, > > On Tuesday, 10 January 2017 14:39:35 UTC+1, Zhiyuan Lei wrote: >> >> Then I generate a new index, It doesn't take affect. >> > > As described in the documentation, you cannot overwrite or modify the > Graylog index template but have to create a new index template with a > higher priority ("order"). > > I still think extractors would be more suitable for your problem, but keep > trying. ;-) > > Cheers, > Jochen > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/2a74e982-26c5-4db3-a8a9-a7524ed69143%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.