Grafana分析Nginx日志

配置Groub by -Terms時報錯，提示需要設置fielddata=true，報錯內容大概如下：?

"Fielddata is disabled on text fields by default ... "

?

解決方法如下：

https://www.elastic.co/guide/en/elasticsearch/reference/current/fielddata.html#_fielddata_is_disabled_on_literal_text_literal_fields_by_default

curl -X PUT "localhost:9200/nginx/_mapping/doc" -H 'Content-Type: application/json' -d'
{"properties": {"xforward": { "type":     "text","fielddata": true}}
}
'

?

操作后仍然報錯，于是

curl -X PUT "localhost:9200/nginx/_mapping/doc?update_all_types" -H 'Content-Type: application/json' -d'         
{"properties": {"xforward": { "type":     "text","fielddata": true}}
}
'

以上nginx為index名稱? xforward為字段名稱。

修改完后查看結果顯示已修改成功

?返回到Grafana進行再一次設置

?

修改成功后，可以正常出圖。

?