# Customize or Remove the message Column/Field from Graylog Search Results

**URL:** <https://community.graylog.org/t/customize-or-remove-the-message-column-field-from-graylog-search-results/37555>\
**Category:** Graylog Central (peer support)\
**Created:** [September 8, 2026, 6:36pm UTC](https://community.graylog.org/t/customize-or-remove-the-message-column-field-from-graylog-search-results/37555 "2026-09-08T18:36:56Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![chandru](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/chandru/32/18572_2.png) [@chandru](https://community.graylog.org/u/chandru)\
**Post date:** [September 8, 2026, 6:36pm UTC](https://community.graylog.org/t/customize-or-remove-the-message-column-field-from-graylog-search-results/37555/1 "2026-09-08T18:36:56Z")

</div>

Hi Graylog Team,

We are currently using Graylog for syslog collection and have a requirement to customize the **`message` column/field** displayed in the Graylog interface.

For example, our device is sending the following syslog message:

```auto

```

```auto
1L-BAU-AU14-IT1 npb: ID: 102, PORT, INFO, EVT, Port: 43 link status is down

```

In Graylog, the message is displayed as the standard **`message` field** , as shown in the attached screenshot.

Our requirement is to determine whether it is possible to:

1. **Hide/remove the `message` column** from the Graylog search results.
2. **Rename/customize the `message` field** to a different field name.
3. Display a **customized/parsed version** of the message instead of the original raw message.
4. If this is possible through **Streams, Pipelines, Extractors, or Search UI configuration** , could you please advise the recommended approach?
5. Is there any configuration or customization available to control the fields shown in the **message details/search results UI**?

We would prefer to customize the presentation in Graylog without modifying the original syslog message being received from the network device.

 ![Graylog message type](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/5/7/578f585916dc8d10fc23d1dd3bea909c537f693d.png)

---

<div class="post-metadata">

**Author:** ![Wine\_Merchant](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/wine_merchant/32/14596_2.png) [@Wine\_Merchant](https://community.graylog.org/u/Wine_Merchant)\
**Post date:** [September 9, 2026, 8:25am UTC](https://community.graylog.org/t/customize-or-remove-the-message-column-field-from-graylog-search-results/37555/2 "2026-09-09T08:25:03Z")

</div>

Hey @chandru,

Could you offer some context on why the altering or removal of the message field is required? Is this an access/permissions issuse?

---

<div class="post-metadata">

**Author:** ![ihe](https://avatars.discourse-cdn.com/v4/letter/i/a88e57/32.png) [@ihe](https://community.graylog.org/u/ihe)\
**Post date:** [September 9, 2026, 3:28pm UTC](https://community.graylog.org/t/customize-or-remove-the-message-column-field-from-graylog-search-results/37555/3 "2026-09-09T15:28:04Z")

</div>

I guess you want to parse the log into different fields, display the relevant ones and hide the blue message line in the log overview.

To parse your logs, you should use Pipelines: [Pipelines](https://go2docs.graylog.org/current/making_sense_of_your_log_data/pipelines.html?tocpath=Manage%20Your%20Log%20Data%7CPipelines%7C _____ 0) for the log you displayed a grok pattern would do the job

To display new fields in the message overview you can add them here in the details of the “All Messages” Widget. Click “Edit” on the top right of the widget to reach this view:

 ![grafik](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/0/8/08840f7f443f90cc1b915218ca9040ba76d7d522.png)

And to hide the full message line with blue text, you need to uncheck those two boxes:

 ![grafik](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/7/e/7ebe80c9c07bf22972ecb57b6b637c4a61df0494.png)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [September 23, 2026, 3:28pm UTC](https://community.graylog.org/t/customize-or-remove-the-message-column-field-from-graylog-search-results/37555/4 "2026-09-23T15:28:22Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.