Drop field with random name

[gsmith]

Hey @eron.medeiros

My applogies I dont have access to my GL server rn, but a while back there was a post of something similar not sure if it will help.

Drop few words from Logs

Hello Just a suggestion. You should be able to configure FortiGate depending on your model/version to prevent certain logs form being sent. This may help reduce the amount of log/s being ingested. Not sure what Model/Version you have so here are a couple link for you. https://docs.fortinet.com/document/fortimail/7.0.0/cli-reference/820362/log-setting-remote https://help.fortinet.com/fos40hlp/41/wwhelp/wwhimpl/common/html/wwhelp.htm?context=fgt&file=Logging.35.6.html https://docs.fortinet.c…

EDIT: You could create a field “url” and then drop it if you real dont want it. What I did was create fields I needed then droped the rest.
here are some more good examples of regex in pipeline.

Need some help with regex in pipeline rule

You’re pretty close. But there are few things that need to be corrected for the rule to work: 1. escaping characters Graylog Pipeline rules use java style regex. Check out the Backslashes, escapes, and quoting section. The short of it is some characters must be escaped using a \. Incidentally, \ is one of the characters that needs to be escaped so anytime you have \ in normal regex, you would need to escape it and it would be come \\. For example \s becomes \\s. 2. regex pipeline function synt…