Is there any way to hide fields in logs like pid, source, process_name, thread_name… actually all I need is my message field.
I know that these fields are what Graylog is all about but I was planning on using a JSON extractor on my message and showing only my json fields when I click to expand the log.
You can use a pipeline rule to drop the fields you don’t want using the http://docs.graylog.org/en/3.0/pages/pipelines/functions.html#remove-field function.
Thanks a lot, that is exactly what I was looking for.
It seems like I cant remove the field “source” though am I doing something wrong.
If I recall correctly, you cannot remove the source field. Though I could be a wrong there. Someone else can maybe chime in.
it is right - removing source is not possible. but you are able to set it to any value you like.