Hello,
Could some explain why I can’t use custom fields: ${source.message} or ${message} as fields in events to display message content? I get blank values. Please check screenshots attached.
Thanks in advance
Graylog version: 4.2.4+
That’s by design @Lukas. The message field is often huge. It would negatively impact performance if we allowed the entire message field to be placed inside the Event. You can choose one or more parsed fields, but not the entire message field.
1 Like
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.