Il 28/07/15 14:13, Jochen Schalanda ha scritto:
you can add your index template to the Elasticsearch configuration file
(https://www.elastic.co/guide/en/elasticsearch/reference/0.90/indices-templates.html#config)
referenced in the elasticsearch_config_file setting in the Graylog
configuration fi
Il 28/07/15 12:06, ZeroUno ha scritto:
I tried with templates: I created this file as
templates/graylog2_ttl_template.json inside /etc/elasticsearch, which is
where elasticsearch configuration can be found:
A small update: I can see this can work if I create the template by curl
-XPUT
Hi,
I'm using the following software versions which I'm not allowed to
upgrade, on RedHat:
graylog2 0.20.1
elasticsearch 0.90.10
Graylog gets messages from logstash.
I need to set a default TTL for all incoming messages, but I'm having
trouble with this.
Most online resources simply suggest
