Delete a specific filed or log received

Graylog Central (peer support)
,
1

Before you post: Your responses to these questions will help the community help you. Please complete this template if you’re asking a support question.
Don’t forget to select tags to help index your topic!

1. Describe your incident:
Due to disk utilization, I need to delete a specific field of a specific logs received by a specific stream or input

2. Describe your environment:

  • OS Information:
    ubuntu
  • Package Version:
    6.0.7
  • Service logs, configurations, and environment variables:

3. What steps have you already taken to try and solve the problem?

still looking for a solution from the UI since am not a developer.

4. How can the community help?
provide me with a methode to delete a specific log filed “message filed, since its now extracted”

Helpful Posting Tips: Tips for Posting Questions that Get Answers [Hold down CTRL and link on link to open tips documents in a separate tab]

2

You need to use a pipeline rule to drop the fields you dont want. However this only works on messages during processesing, you cannot change messages that are already stored.

3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.