inatec-dh

Thank you for pointing me out on missing in_txt field. I will check by graylog why it is failing to get this field form the message (where the field is...

Ok. I can confirm if I manually add in_txt field to the message then playback is working as expected. And graylog is not inserting this field because its empty ("in_txt":"")....

I have checked different possibilities, but it looks like it is general problem. Graylog is using dynamic template to store different log fields into elasticsearch index. https://www.elastic.co/guide/en/elasticsearch/reference/current/dynamic-templates.html "Dynamic field mappings...

I have tried to create separate index for tlog data with custom mapping but looks like its general graylog problem. If I insert data directly to elasticsearch everything is Ok....