Please I want to know how i get " Quick Values for message" in Serach result.
I want a clear answer
System > configuration
please how to make it enable
click on “update” - scroll down and change/remove the fields that are disabled for analysis.
As I said, you are allowed to think.
i did it , same problem
remove all of theme or just one in front of ui analysis ( P30D…) ??
this is disabled for a reason by default …
… check your elasticsearch log, you might notice some Out-of-Memory error or something similar.
The error is a 500, so the backend (elasticsearch) returns an error on that field.
Again check your elasticsearch log.
Hi @jan please explain to me i would have a quick values message graph ! how !!! i can’t fix this erreur !!
it is not possible.
messages holds a wide range of information, this field is analyzed and if you make it unique and count those it will break. That is the reason for the 500 …
You might want to normalize your logs, seperate the information that are in the message field into multiple different fields. Please read the community, You should fokus on reaching the goal, but not bending something into the position you like to have it.
Hi @jan please I Want to Know Why when i spear systemctl status graylo-server.service … the service graylog " flops "…I searched for a lot…it’s weird; I hope you understand me
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.