Hi Karol
Thanks for the reply. We have been left this ES setup by a previous member
of staff.
We create new Indexes every hour using the following the following perl
statement
Are you saying I have to add store => yes to keepalive?
We don't do that for the other as you can see?
create_index(
index => $index,
settings => {
_timestamp => { enabled => 1, store
=> 1 },
number_of_shards => 3,
number_of_replicas => 1,
},
mappings => {
varnish => {
_timestamp => { enabled => 1,
store => 1 },
properties => {
content_length => { type =>
'integer' },
age => { type => 'integer' },
keepalive => { type =>
'integer' },
resp_time => { type =>
'float' },
host => { type =>
'string', index => 'not_analyzed' },
time => { type =>
'string', store => 'yes' },
location => { type =>
'string', index => 'not_analyzed' },
addr => {
fields => {
ip => { type =>
'ip' },
addr => { type =>
'string', index => 'not_analyzed' },
}
},
}
}
},
);
I would no if the _source field has been disabled, how do I check? Does
this help more:
{
_index: 2013122312
_type: log
_id: Juh_YQJaT4GQ8Pjwk1bnqw
_score: 1
_source: {
protocol: HTTP/1.0
cdn: -
vary: Accept-Encoding,ETag
browser: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1.1)
GeckaSeka/20090911 Firefox/3.5.1
encoding: -
location: -
geo: US
ref: -
origin: -
cookie: -
uri: /
cache_control: -
content_length: 54053
userid: 0
age: 11556
resp_time: 0.000110149
method: GET
accept: -
ssl: 0
response_code: 200
accept_language: -
varnstat: hit
_src: log
addr: 41.5.97.6
}
}
Do you need anymore information to help?
Thanks again
Nick
On Tue, Dec 24, 2013 at 2:27 AM, Karol Gwaj karol@gwaj.me wrote:
keepalive field is stored in _source field (if you want to store it
separately you have to add "store" : true to mapping)
hard to tell more based on your example,
also maybe you disabled _source field completely?
On Monday, December 23, 2013 8:40:17 PM UTC, Nick Toseland wrote:
Hi All
I am new to Elasticsearch, please forgive my stupidity.
I cant seem to get the keepalive field out of ES.
{
"_index" : "lj-2013122320",
"_type" : "varnish",
"_id" : "Y1M18ZItTDaap_rOAS5YOA",
"_score" : 1.0
}
I can get other field out of it cdn:
{
"_index" : "2013122320",
"_type" : "log",
"_id" : "2neLlVNKQCmXq6etTE6Kcw",
"_score" : 1.0,
"fields" : {
"cdn" : "-"
}
}
The mapping is there:
{"log":{"_timestamp":{"enabled":true,"store":true},"properties":
{"keepalive":{"type":"integer"}}}}
Any help is much appreciated.
Thanks in advance
Nick
--
You received this message because you are subscribed to a topic in the
Google Groups "elasticsearch" group.
To unsubscribe from this topic, visit
https://groups.google.com/d/topic/elasticsearch/roVCeLImQxs/unsubscribe.
To unsubscribe from this group and all its topics, send an email to
elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/4ddd4df2-b2f6-4a3f-8ff5-5a0196f389d7%40googlegroups.com
.
For more options, visit https://groups.google.com/groups/opt_out.
--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAMWL0yPqpG6H5gC58UWZHFodwOV14WM4P_4LpovA_mTB%3DDkG2A%40mail.gmail.com.
For more options, visit https://groups.google.com/groups/opt_out.
