Edit, remove, change, properties in an index


I would like to know if it is possible to change the name, type of a property in the index graylog_0 or / and graylog_defelector

Is it also possible to delete a property simply?

For example I would like to change a type of “keyword” to “long” or rename the properties. Because the default values of the “Grok” does not match with read values

(i try use %{NUMBER:fieldname;long} but the value remains at “keyword”)

Thank you :slight_smile:


I have to completely remove the index each time I want to change a single values?

The mapping of existing indices can only be changed in a compatible way. See https://www.elastic.co/guide/en/elasticsearch/reference/5.6/indices-put-mapping.html for details.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.