grok


Graylog cannot look a field as numeric


I use Graylog 2.10.0 to collect the logs. I set a Grok pattern to parse my log, and one field is
%{NUMBER:consume_time;int}ms,and it works well, I capture consume_time correctly, but when I try to use "statistics" function, it only show "Total" and "Cardinality", the other fields are marked as "NaN"。
And I also check the document type in ElasticSearch, it shows the type of "consume_time" is "long".
Anyone can tell me why?
It's possible that the consume_time field contained non-numeric values before (in older indices) and the time frame you've selected includes those values.
Try cycling indices (System → Indices → Maintenance) and only select a time frame including this new index to verify this guess.

Related Links

Grok Learning - 'Halve This'
logstash grok patterns assistance
Using multiple grok pattern to assign value to 1 field
Graylog cannot look a field as numeric
Logstatsh help needed to write grok filter
How to have timestamp as the only delimiter in Grok Logstach?
Error compiling Grok
logstash grok filter annoyance

Categories

HOME
notepad++
go
jpa
design-patterns
developer-tools
jax-rs
pyqt
serialization
components
error-handling
sublimetext
r-googlesheets
ado.net
pearson-correlation
nuget-package
odoo-8
title
performancepoint
extjs4.2
fabric.io
plist
nancy
gkturnbasedmatch
pybossa
zerobrane
atlassian
gruntfile
aws-sdk
feathersjs
poedit
ksh
backpack-for-laravel
resourcebundle
angularjs-components
ms-access-web-app
has-and-belongs-to-many
browser-sync
nsurl
magento-1.8
anki
kudu
installshield-le
pdw-file-browser
searchkit
sessionstorage
metaprogramming
chef-solo
trigonometry
escpos
congestion-control
android-exoplayer
monkey-testing
opennms
custom-font
context-sensitive-grammar
opengl-4
git-flow
ngmaterial
mouseleave
testrail
usart
docpad
myspace
macaulay2
vorpal.js
nservicebus5
nss
ascii-art
spring-retry
vhosts
concurrentmodification
grgit
flock
text-search
cgi-bin
viola-jones
telepat
mraid
android-broadcast
user-permissions
zxspectrum
phpldapadmin
openbabel
rapidsvn
android-vibration
ghcjs
entry-point
human-computer-interface
nsmenu
renderer
twitter-bootstrap-rails
artemis
http-patch
code-duplication
observium
poker
android-loadermanager
os.system
inkcanvas
wiimote
stress
apache-commons-dbutils
landscape-portrait
cac
dot-emacs
django-piston

Resources

Encrypt Message