Complex field types

[bradleykite]

Hi,

Can anyone advise if it is possible to have complex field types within a log message?

From all of the examples it looks like each field can only be of primitive types - eg String.

I’d like to be able to store a complex field similar to the way ELK can do it:

Person {
Name: "Firstname Lastname"
Age: 60
}

ELK uses a dot in order to reference the nested fields in any rules - eg Person.Name - is this possible with Graylog?

Thanks in advance

Brad.

[jochen]

@bradleykite

ELK uses a dot in order to reference the nested fields in any rules - eg Person.Name - is this possible with Graylog?

No, that’s not possible with Graylog.

Graylog currently only supports flat document structures.