Hello I was playing with snmp some time ago, it created multiple* fields with dots*. Now new ES doesn't support dots in fields names so I cannot upgrade to graylog 2.0. Messages with those fields contain* no valuable data*, so I'd like to *delete *them from few past indices (yes, I know, I have to *unlock *them first). Is there any ES magic i can use to do this semi-automatically or i have to parse mapping json for fields (this is `jq` query I came up with for now: `.graylog_158.mappings.message.properties|keys|map(match(".*\\..*"))[].string`) and delete every message containing fields parsing spits out? (_exists_: doesn't seems to work with wildcards)
-- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/dffbea9a-f98c-4090-940e-c0c6e5f0550a%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.