Graylog2 / Graylog2/graylog2-server

Provide a "Graylog Schema" Index Set Field Type Profiles as an out of box profile

Open
#19,408 1 comment 0 reactions 0 assignees View on GitHub
feature secdev-cycle5 triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

## What?

Using the new "Index Set Field Type Profiles" feature, add an out of box profile that adheres to the [Graylog Schema](https://schema.graylog.org/).

## Why?

Configuring explicit field types is beneficial to avoid dynamic mapping incorrectly guessing a field type based on the first message in the index with that field. For example a field that should store strings may be incorrectly typed as an integer (or vice versa). Some types are also not possible via dynamic mappings, such as the `ip` type.

For this reason, providing users with a suggested default mapping that they can apply as they choose, can be very helpful, both for Graylog Open users and also paying customers alike.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.