How can we build a SOLR Schema für SYSLOGS with sorting and searching functionality?

[#1]

Hi @bkosaraju,

i have some problems configuring filed mapping for each of the json fields.

This is the json file structure :
{

"event_timestamp":"${time:substring(0,20):toDate('yyyy MMM dd HH:mm:ss'):format('yyyy-MM-dd HH:mm:ss')}",

"host":"${message:substring(21):substringBefore('')}",

"message":"${message:substring(21):substringAfter(' '):replace('"', '\\\\"')}"

}

this is my PutSolrContentStream config:

Indexing failed ...

[#2]

PutSolrStreamContent config

[#3]

Hi @bkosaraju,

sorry, was my fault!
Solution runs fine !!!
My input data was wrong!

Thanks, great solution.
Timo