I’m doing a paper-evaluation of Graylog for project usage. We need to load Elasticsearch with a subset of fields from each message. I can’t tell from the Extractor documentation if Extractors only work with messages already loaded in Elasticsearch or if I can use them to extract desired fields fro…

Extractor before adding to Elasticsearch?

system (system) Closed December 31, 2020, 8:31pm 2

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Questions regarding Extractor Graylog Central (peer support)	5	1011	February 7, 2019
Using Extractors without inputs Graylog Central (peer support)	4	309	July 5, 2019
Searching on extracted fields Graylog Central (peer support)	3	527	October 4, 2019
Adding a new extractor field to an existing index Graylog Central (peer support)	3	1196	September 12, 2018
Unable to edit Extractors Graylog Central (peer support)	2	832	August 14, 2020