graylog source字段的值,从哪里配置的

img


graylog + MongoDB + es 搭建, 采用的是sidecar + filebeat 收集日志,现在graylog 里的source字段的值,从哪里配置的,我想要去修改它。

https://www.jianshu.com/p/5e65f50f12e7
https://blog.csdn.net/weixin_33674976/article/details/92380229
供参考

直接给你上源码了:
LoggerConfiguration loggerConfiguration = new LoggerConfiguration();

     loggerConfiguration
        .Enrich.FromLogContext()
        .Enrich.WithProperty("source", "xxx-yyy")
        .Enrich.WithProperty("test", "test9999");

直接给你上源码了:
LoggerConfiguration loggerConfiguration = new LoggerConfiguration();

     loggerConfiguration
        .Enrich.FromLogContext()
        .Enrich.WithProperty("source", "xxx-yyy")
        .Enrich.WithProperty("test", "test9999");

$ curl -X GET 'http://localhost:9200/_template/graylog-internal?pretty'
{
"graylog-internal" : {
  "order" : -1,
  "index_patterns" : [
    "graylog_*"
  ],
  "settings" : {
    "index" : {
      "analysis" : {
        "analyzer" : {
          "analyzer_keyword" : {
            "filter" : "lowercase",
            "tokenizer" : "keyword"
          }
        }
      }
    }
  },
  "mappings" : {
    "message" : {
      "_source" : {
        "enabled" : true
      },
      "dynamic_templates" : [
        {
          "internal_fields" : {
            "mapping" : {
              "type" : "keyword"
            },
            "match_mapping_type" : "string",
            "match" : "gl2_*"
          }
        },
        {
          "store_generic" : {
            "mapping" : {
              "type" : "keyword"
            },
            "match_mapping_type" : "string"
          }
        }
      ],
      "properties" : {
        "gl2_processing_timestamp" : {
          "format" : "yyyy-MM-dd HH:mm:ss.SSS",
          "type" : "date"
        },
        "gl2_accounted_message_size" : {
          "type" : "long"
        },
        "gl2_receive_timestamp" : {
          "format" : "yyyy-MM-dd HH:mm:ss.SSS",
          "type" : "date"
        },
        "full_message" : {
          "fielddata" : false,
          "analyzer" : "standard",
          "type" : "text"
        },
        "streams" : {
          "type" : "keyword"
        },
        "source" : {
          "fielddata" : true,
          "analyzer" : "analyzer_keyword",
          "type" : "text"
        },
        "message" : {
          "fielddata" : false,
          "analyzer" : "standard",
          "type" : "text"
        },
        "timestamp" : {
          "format" : "yyyy-MM-dd HH:mm:ss.SSS",
          "type" : "date"
        }
      }
    }
  },
  "aliases" : { }
}


参考楼上的,应该可行

服务器里面的系统配置