Explicitly specifying a data type for a field

[daniel2]

How to do it?

The link posted here:

Changing a field type from string to numeric and mid-setup and past string values

Ok pipeline field rewrite rule is not necessary in my case, because indeed Graylog/Elasticsearch does treat a numeric json value as numeric on store, provided the original value seen is numeric to begin with, and I can do numeric operations on them like Generate Chart. I’ll have to rewrite all my json to not quote numeric fields if I want to most efficiently take advantage of this. Following this old thread it was suggested to “roll the index” or “cycle the deflector.” I disabled my pipeline …

is dead.

Is it still possible with current version? This old thread is the only reference I could find to this (explicitly specifying a data type for a field).

[Joel_Duffield]

Its super easy to specify a field type if you are on graylog 6+. Go into system> indices and then field type profiles. Also you can click a field name in search and change the field type there as well.