Hello
I was playing with snmp some time ago, it created multiple* fields with
dots*. Now new ES doesn't support dots in fields names so I cannot upgrade
to graylog 2.0. Messages with those fields contain* no valuable data*, so
I'd like to *delete *them from few past indices (yes, I know, I have to *unlock
*them first). Is there any ES magic i can use to do this semi-automatically
or i have to parse mapping json for fields (this is `jq` query I came up
with for now:
`.graylog_158.mappings.message.properties|keys|map(match(".*\\..*"))[].string`)
and delete every message containing fields parsing spits out? (_exists_:
doesn't seems to work with wildcards)
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/dffbea9a-f98c-4090-940e-c0c6e5f0550a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
