Edit, remove, change, properties in an index


(Agulor) #1

Hello

I would like to know if it is possible to change the name, type of a property in the index graylog_0 or / and graylog_defelector

Is it also possible to delete a property simply?

For example I would like to change a type of “keyword” to “long” or rename the properties. Because the default values of the “Grok” does not match with read values

(i try use %{NUMBER:fieldname;long} but the value remains at “keyword”)

Thank you :slight_smile:


(Jochen) #2

http://docs.graylog.org/en/2.4/pages/configuration/elasticsearch.html#custom-index-mappings


(Agulor) #3

I have to completely remove the index each time I want to change a single values?


(Jochen) #4

The mapping of existing indices can only be changed in a compatible way. See https://www.elastic.co/guide/en/elasticsearch/reference/5.6/indices-put-mapping.html for details.


(system) #5

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.