Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Provide a "Graylog Schema" Index Set Field Type Profiles as an out of box profile #19408

Open
drewmiranda-gl opened this issue May 21, 2024 · 1 comment

Comments

@drewmiranda-gl
Copy link
Member

What?

Using the new "Index Set Field Type Profiles" feature, add an out of box profile that adheres to the Graylog Schema.

Why?

Configuring explicit field types is beneficial to avoid dynamic mapping incorrectly guessing a field type based on the first message in the index with that field. For example a field that should store strings may be incorrectly typed as an integer (or vice versa). Some types are also not possible via dynamic mappings, such as the ip type.

For this reason, providing users with a suggested default mapping that they can apply as they choose, can be very helpful, both for Graylog Open users and also paying customers alike.

@tellistone
Copy link

So if the customer does use field names that adhere to the schema, they'll be the right data type. Jeen-yus!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants