I use elasticsearch_analyzer = standard in my graylog,and I have a message like this
2017-01-09 20:02:50,197 [x/x] - [(x,aa.bb,Y,645810f41483963370181610719839,1ms)] Expected Behavior expcected all terms like Field terms: xxx Y 645810f41483963370181610719839 1ms the last comma should spit the last words. Current Behavior Field terms: xxx Y 645810f41483963370181610719839,1ms but last words 645810f41483963370181610719839,1ms was not splited. maybe I can set stopwords to solve this problem, according this https://www.elastic.co/guide/en/elasticsearch/reference/2.3/analysis.html does anyone have an idea? -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/fdd519af-595e-4cf0-975b-0fb794497ce4%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
