Expected numeric type on field [Application], but got [keyword]

Graylog Central (peer support)
1

Hi everybody!

After created a Stream with a rule that in the field Application I receive a keyword called “Corridas”, I started to get a lot of errors like this in the Elastic Search logs:

Caused by: java.lang.IllegalArgumentException: Expected numeric type on field [Application], but got [keyword]

So how can I use a filter/rule that I can only receive in a field things related with a word x?

Thank you

2

you can

  • create a custom mapping that forces a specific field type that matches the content
  • you write a processing pipeline that writes numbers in one field “application_num” and strings in “application_keyword”

both are possible and highly depends what you like todo with the data.

3

Is there a way that I can just deny the user to search some keywords, even it’s in All Messages Stream?
Is just with streams that I can deal with permissions to a user?

4

no - you do not have such an option

5

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.