Graylog2 / Graylog2/graylog2-server

Field mapping management

Open
#1,443 8 comments 1 reaction 0 assignees View on GitHub
feature triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

Hello,

Again, thanks a lot for all work done in Graylog, this product is awesome.

I'm linking here what i think should be in next milestone: https://graylog.ideas.aha.io/ideas/GL2E-I-453

As we assume, graylog drive it's own ES indices and already does some magic on it, i think, graylog should be able to offer to administrator the possibility to define fields conventions via dynamic template feature.

Concrete example, i define that every field ending by *_size is a number on ES.
- Graylog set this configuration in ES
- Graylog inform type conventions in /system/fields and so, somewhere in webui
- Graylog check this convention in a filter before pushing it in ES
- If validation fails, return to matching streams the "dead letters"

I think this feature can stay optional so does not break anything, but will helps a lot users to know in advance how to forge messages, and so get Numeric based widgets working. And also avoid administrators to manually set theses settings on indices "managed" by graylog.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.