# Grok pattern field still being extracted as string not integer

**URL:** <https://community.graylog.org/t/grok-pattern-field-still-being-extracted-as-string-not-integer/21607>\
**Category:** Graylog Central (peer support)\
**Created:** [October 27, 2021, 4:13pm UTC](https://community.graylog.org/t/grok-pattern-field-still-being-extracted-as-string-not-integer/21607 "2021-10-27T16:13:31Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![dcecchino](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/dcecchino/32/9949_2.png) [@dcecchino](https://community.graylog.org/u/dcecchino)\
**Post date:** [October 27, 2021, 4:13pm UTC](https://community.graylog.org/t/grok-pattern-field-still-being-extracted-as-string-not-integer/21607/1 "2021-10-27T16:13:31Z")

</div>

Hello,

I have a pattern that is still producing a string and not being described as an integer. I’ve seen some things where an index should be rotated first, but not sure how to force that. Any suggestions on this?

%{NUMBER:unisphere\_id;int}

---

<div class="post-metadata">

**Author:** ![tmacgbay](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/tmacgbay/32/3878_2.png) [@tmacgbay](https://community.graylog.org/u/tmacgbay)\
**Post date:** [October 27, 2021, 4:56pm UTC](https://community.graylog.org/t/grok-pattern-field-still-being-extracted-as-string-not-integer/21607/2 "2021-10-27T16:56:21Z")

</div>

In the docs [here](https://docs.graylog.org/docs/index-model), scroll to the second picture where you have clicked on the index set… In the upper right there is a blue “maintenance” button this is where you can rotate the index.

![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/7/72887f23c33002389587494aff9dde56f4c65f33.png)

Elastic takes a guess at what type to store data at - if you are forcing a number it should be a number for future indexes. There is a rather involved method for correcting the past indexes if you are interested - There is an official write up on it around here somewhere you can search for or I have a half-baked one I wrote up before that. 🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [November 10, 2021, 4:57pm UTC](https://community.graylog.org/t/grok-pattern-field-still-being-extracted-as-string-not-integer/21607/3 "2021-11-10T16:57:10Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.