Graylog2 / Graylog2/graylog2-server

Allow index field type feature to configure dynamic_templates

Open
#20,124 0 comments 0 reactions 0 assignees View on GitHub
feature triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

## What?

Allow index field type feature to configure dynamic_templates:

For example (excerpt from `graylog-internal`:

```json
{
"graylog-internal": {
"order": 0,
"index_patterns": [
"graylog_*"
],
"mappings": {
"dynamic_templates": [
{
"internal_fields": {
"mapping": {
"type": "keyword"
},
"match_mapping_type": "string",
"match": "gl2_*"
}
}
]
},
"aliases": {}
}
}
```

## Why?

This allows setting multiple fields using a match pattern. This is useful if the Graylog environment has a large number of fields or may not be able to predict what the field names will be ahead of time. Some reasons this may happen if the log source is part of an application developed by the customer and logged fields can change, or flattening json.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.