# Field name stripping leading underscore

**URL:** <https://community.graylog.org/t/field-name-stripping-leading-underscore/19146>\
**Category:** Graylog Central (peer support)\
**Created:** [March 16, 2021, 6:00pm UTC](https://community.graylog.org/t/field-name-stripping-leading-underscore/19146 "2021-03-16T18:00:05Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![hlayson](https://avatars.discourse-cdn.com/v4/letter/h/5daacb/32.png) [@hlayson](https://community.graylog.org/u/hlayson)\
**Post date:** [March 16, 2021, 6:00pm UTC](https://community.graylog.org/t/field-name-stripping-leading-underscore/19146/1 "2021-03-16T18:00:06Z")

</div>

This is my print statement to stream the web server logs to graylog.

printf “{ “version”: “%s”, “host”: “%s”, “smsg”: “%s”, “\_GL\_environment”: “%s”, “\_GL\_log”: “%s”, “\_GL\_type”: “%s”, “\_GL\_ws”: “%s”, “\_GL\_filter\_host”: “%s”, “message”: “%s” }\n”, ver, hn, smsg, env, lognm, type, ws, fh, $0| “/bin/nc -u [my.domain.com](http://my.domain.com) 12201”

Notice how we have the field name with a leading underscore. For some reason this is being stripped out when it get to Graylog, The field displays as GL\_environment instead of \_GL\_environment, Any idea why? All my other logs send the field name correctly.

---

<div class="post-metadata">

**Author:** ![cawfehman](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/cawfehman/32/4132_2.png) [@cawfehman](https://community.graylog.org/u/cawfehman)\
**Post date:** [March 29, 2021, 4:24pm UTC](https://community.graylog.org/t/field-name-stripping-leading-underscore/19146/2 "2021-03-29T16:24:38Z")

</div>

how is your input setup? have you tried a RAW text input?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [April 12, 2021, 4:25pm UTC](https://community.graylog.org/t/field-name-stripping-leading-underscore/19146/3 "2021-04-12T16:25:32Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
