GROK Extractor Timestamp Question

Yes of course, use UNWANTED as a name in grok pattern, for example:
%{BASE10NUM:UNWANTED}

Check docs:
https://docs.graylog.org/en/3.3/pages/extractors.html#using-grok-patterns-to-extract-data

1 Like