Meta value is not being indexed

[GayathriPulla]

HI Team, 

Eventhough we have described the meta key value to be indexed, it is not being indexed. Please suggest. 

<key description="Sigid" level="IndexValues" name="sigid" format="UInt32" valueMax="999999" defaultAction="Open"/>

The above is the configuration for the Key description. 

[SravanKoneti1]

Hi Gayatri,

By default, sig.id defined as flags="None" table-map.xml as below.

<mapping envisionName="sigid" nwName="sig.id" flags="None" format="Int32" envisionDisplayName="SignatureID" failureKey="sig.id.str" nullTokens="(null)"/>

So, please remove this entry in table-map-custom.xml file.

Please change below entry in index-concentrator-custom.xml. 

From:

<key description="Sigid" level="IndexValues" name="sig.id" format="UInt32" vvalueMax="999999" defaultAction="Open" />

To:

<key description="SignatureID" level="IndexValues" name="sig.id" format="Int32" vvalueMax="999999" defaultAction="Open" />

Please restart logdecoder and concentrator service post changes.

[GayathriPulla]

HI Sravan, I have changed the values as recommended and restarted the concentrator as well as jettysrv, But still it is showing the same. 

[SravanKoneti1]

Hi Gayatri,

Are you investigating against same concentrator or broker? Please check.

If investigating against broker, please edit index-broker-custom.xml as well.

[GayathriPulla]

Hi Sravan, I am investigating against same concentrator itself, but still facing same issue.

[GayathriPulla]

Hi Sravan, Now, its seen in blue color, but able to apply filter on the same, what might be issues, I have updated same through cli and then it changed.

[SravanKoneti1]

Good to hear Gayathri:)..I would use CLI for editing XML files.

[GayathriPulla]

Hi Sravan, 
Even it is being indexed, still we are able to apply filter on the values.. Can u please suggest on this?