grok


Graylog cannot look a field as numeric


I use Graylog 2.10.0 to collect the logs. I set a Grok pattern to parse my log, and one field is
%{NUMBER:consume_time;int}ms,and it works well, I capture consume_time correctly, but when I try to use "statistics" function, it only show "Total" and "Cardinality", the other fields are marked as "NaN"。
And I also check the document type in ElasticSearch, it shows the type of "consume_time" is "long".
Anyone can tell me why?
It's possible that the consume_time field contained non-numeric values before (in older indices) and the time frame you've selected includes those values.
Try cycling indices (System → Indices → Maintenance) and only select a time frame including this new index to verify this guess.

Related Links

Grok Learning - 'Halve This'
logstash grok patterns assistance
Using multiple grok pattern to assign value to 1 field
Graylog cannot look a field as numeric
Logstatsh help needed to write grok filter
How to have timestamp as the only delimiter in Grok Logstach?
Error compiling Grok
logstash grok filter annoyance

Categories

HOME
embedded
time-complexity
jmx
components
camera
error-handling
replace
scripting
permissions
python-multithreading
google-admin-sdk
special-characters
mql5
drop-down-menu
github-enterprise
windows-ce
scsi
mvc-mini-profiler
google-picker
sencha-touch
zxing
short-url
froala
fat
licensing
linked-data
inversion-of-control
android-things
winexe
mockjax
testbed
angularjs-material
glib
erb
sammy.js
fossil
alphabetical
openproject
lint
xv6
print-css
claims
android-checkbox
flask-restful
clarifai
jquery-ui-draggable
insight
azure-cli
boo
mathcad
ampps
donations
redbeard-ios
tooleap
hadoop-partitioning
nupic
invoke-sqlcmd
toast
sapi
page.js
rdflib
ms-access-2000
user-permissions
rrule
qtwebengine
uncaught-typeerror
cocos3d
nsmenu
xml-namespaces
rcaller
ray
tinyxml
gnumeric
renderer
ie8-compatibility-mode
isqlquery
stacky
chart-director
intersect
jquery-blockui
wcf-configuration
dajaxice
urlrewriter
landscape-portrait
xcelsius
lr
rmdir
tmx
twitterizer
cruisecontrol.rb
request-headers
lxr
complex-event-processing
escrow
business-model
wspbuilder

Resources

Database Users
RDBMS discuss
Database Dev&Adm
javascript
java
csharp
php
android
javascript
java
csharp
php
python
android
jquery
ruby
ios
html
Mobile App
Mobile App
Mobile App