search

Graylog2 / graylog2-server

Free and open log management
https://www.graylog.org
Other
7.41k stars 1.07k forks source link

Remove import/export extractors #2386

Closed joschi closed 5 years ago

joschi commented 8 years ago

The import/export extractors functionality has been deprecated for a while now and is still the source of funny errors.

The functionality has been superseded by the content packs since Graylog 0.90.x and should be removed from the codebase.

jalogisch commented 8 years ago

when this feature is added, the content pack need to be extended to have extractors as an option too. without this we would loose a well used feature.

joschi commented 8 years ago

@jalogisch How often do people really use the import/export extractor feature? There are virtually only content packs on the Graylog Marketplace and no extractors, as far as I see.

jalogisch commented 8 years ago

@joschi i notice that people that have a lab use this regular during the setup and build process - when they add new inputs and first stream them to the lab to insert them later in the production environment and have all messages parsed from the very beginning.

joschi commented 8 years ago

@jalogisch But that's exactly what content packs are for: Create the configuration (e. g. inputs with extractors) in one Graylog instance, export them in a content pack, import it in another Graylog instance, and apply that content pack to get an identical configuration (e. g. inputs with extractors).

jalogisch commented 7 years ago

Just for notice - currently I notice that most ppl use this function to have the same set of extractors on different inputs on the same setup. With the current function of the content packs that kind of work is not possible.

STRML commented 6 years ago

We use it as well as a convenient way of synchronizing configurations among multiple nodes, and to just keep our extractor config in version control. Our use case could easily be converted to content packs, it's just not as straightforward. That said, it is rather annoying to use import, as the existing extractors remain so they must be deleted first.

bernd commented 5 years ago

Closing this because the new content pack system will be shipped in 3.0.