Change field type into string


(phil) #1

Hello everyone,
I’m stuck to make work a json log send to graylog by filebeat because it contains a field “level” that is not numeric (info | warn etc…)
i tried to create a pipeine rule but i dont know how to do
also is it possible to change the native type long for the field level stored in graylog ?

Here is the error:
{“type”:“mapper_parsing_exception”,“reason”:“failed to parse field [level] of type [long]”,“caused_by”:{“type”:“illegal_argument_exception”,“reason”:“For input string: “info””}}

Thanks in advance


(system) closed #2

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.