Is there any way to hide fields in logs like pid, source, process_name, thread_name… actually all I need is my message field.
I know that these fields are what Graylog is all about but I was planning on using a JSON extractor on my message and showing only my json fields when I click to expand the log.
You can use a pipeline rule to drop the fields you don’t want using the http://docs.graylog.org/en/3.0/pages/pipelines/functions.html#remove-field function.
Thanks a lot, that is exactly what I was looking for.
It seems like I cant remove the field “source” though am I doing something wrong.
If I recall correctly, you cannot remove the source field. Though I could be a wrong there. Someone else can maybe chime in.
it is right - removing source is not possible. but you are able to set it to any value you like.
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.