I did a retry with all manipulation mapping, fixed index name and recreate
index. It work perfect but I have a little issue. Any new field have
"index" : "not_analyzed" yet.
curl -X GET 'http://localhost:9200/_template?pretty'
http://pastebin.com/5hyFHkzJ
My "graylog-custom-mapping" contains "in
Hi,
did you create the index "graylog2_0" after you've added your custom index
mapping and the custom index template? Only newly created indices will
receive the new index mapping.
The index name also doesn't match the pattern you're using (which is
"graylog_*" and not "graylog2_*").
Also
se
I added new templates mygraylog and mygraylog2.
curl -X GET 'http://localhost:9200/_template?pretty' returns
http://pastebin.com/qnweRuqb
After that I cretated new fields ipt2323 and ipt2301. It doesn't work for
me
"ipt2301" : {
"type" : "string",
"index" : "
Hi,
you can simply create your own index mapping and put it into a custom index
template to achieve this. The Graylog index template has the lowest
priority ("order") and any other index template can override its settings.
See https://www.elastic.co/guide/en/elasticsearch/reference/2.3/mapping.
