I guess it’s common practice to parse message into specific fields and then drop initial content of the message, to avoid unnecessary data duplication. What’s the current recommended and most performant way for that? Using Extractor + Regex replacement or via Pipeline? Actually I believe it shoul…

maybe this would be helpful: [image] Graylog : Delete field automaticaly Graylog Central (peer support) Hi, I would like to know how to delete automaticaly fild after many day. For exemple I would like to delete the field “full_message” after 1 month. I beleive that I m…

Best way to clear initial message field?

Graylog Central (peer support)

maniel (Daniel) October 21, 2020, 12:22pm 2

maybe this would be helpful:

Topic		Replies	Views
Drop default message field in extractors or pipelines Graylog Central (peer support)	1	5043	September 28, 2017
Graylog : Delete field automaticaly Graylog Central (peer support)	1	2202	August 10, 2017
Remove or nullify full_message field after extractors are completed? Graylog Central (peer support)	1	720	November 12, 2021
Delete fields in message Graylog Central (peer support)	1	2345	October 4, 2019
Delete a specific filed or log received Graylog Central (peer support) elastic , capacity_planning	1	47	May 8, 2025

Best way to clear initial message field?

Related topics