# Quick Values for message

**URL:** <https://community.graylog.org/t/quick-values-for-message/9587>\
**Category:** Graylog Central (peer support)\
**Created:** [March 22, 2019, 10:34am UTC](https://community.graylog.org/t/quick-values-for-message/9587 "2019-03-22T10:34:28Z")\
**Posts on this page:** 15\
**Page:** 1

<div class="post-metadata">

**Author:** ![Labidi](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/labidi/32/5597_2.png) [@Labidi](https://community.graylog.org/u/Labidi)\
**Post date:** [March 22, 2019, 10:34am UTC](https://community.graylog.org/t/quick-values-for-message/9587/1 "2019-03-22T10:34:28Z")

</div>

hi everyone,  
Please I want to know how i get " Quick Values for message" in Serach result.  
I want a clear answer  
 ![message](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/9/9f870292679942b958569ffa5e7a08097757f09f.png)

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [March 22, 2019, 10:38am UTC](https://community.graylog.org/t/quick-values-for-message/9587/2 "2019-03-22T10:38:21Z")

</div>

Graylog UI `System > configuration`

---

<div class="post-metadata">

**Author:** ![Labidi](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/labidi/32/5597_2.png) [@Labidi](https://community.graylog.org/u/Labidi)\
**Post date:** [March 22, 2019, 10:39am UTC](https://community.graylog.org/t/quick-values-for-message/9587/3 "2019-03-22T10:39:53Z")

</div>

![config](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/f/f43b8693e0f5d5a078da2a10a6d44e72faa6ac53.png)

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [March 22, 2019, 10:47am UTC](https://community.graylog.org/t/quick-values-for-message/9587/4 "2019-03-22T10:47:04Z")

</div>

it is allowed to think!

 ![f43b8693e0f5d5a078da2a10a6d44e72faa6ac53](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/a/aa4eda4c2e8e97725465bea44e6e097bd58a71eb.png)

---

<div class="post-metadata">

**Author:** ![Labidi](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/labidi/32/5597_2.png) [@Labidi](https://community.graylog.org/u/Labidi)\
**Post date:** [March 22, 2019, 1:10pm UTC](https://community.graylog.org/t/quick-values-for-message/9587/5 "2019-03-22T13:10:06Z")

</div>

please how to make it enable

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [March 22, 2019, 1:34pm UTC](https://community.graylog.org/t/quick-values-for-message/9587/6 "2019-03-22T13:34:22Z")

</div>

click on “update” - scroll down and change/remove the fields that are disabled for analysis.

As I said, you are allowed to think.

---

<div class="post-metadata">

**Author:** ![Labidi](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/labidi/32/5597_2.png) [@Labidi](https://community.graylog.org/u/Labidi)\
**Post date:** [March 22, 2019, 1:51pm UTC](https://community.graylog.org/t/quick-values-for-message/9587/7 "2019-03-22T13:51:22Z")

</div>

> [@jan](#):
>
> scroll down

i did it , same problem

---

<div class="post-metadata">

**Author:** ![Labidi](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/labidi/32/5597_2.png) [@Labidi](https://community.graylog.org/u/Labidi)\
**Post date:** [March 22, 2019, 2:21pm UTC](https://community.graylog.org/t/quick-values-for-message/9587/8 "2019-03-22T14:21:35Z")

</div>

> [@jan](#):
>
> click on “update” - scroll down and change/remove the fields that are disabled for analysis.

remove all of theme or just one in front of ui analysis ( P30D…) ??

---

<div class="post-metadata">

**Author:** ![Labidi](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/labidi/32/5597_2.png) [@Labidi](https://community.graylog.org/u/Labidi)\
**Post date:** [March 27, 2019, 8:11am UTC](https://community.graylog.org/t/quick-values-for-message/9587/10 "2019-03-27T08:11:13Z")

</div>

![Generate%20chart](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/c/cc458184338c3f17ffb30e08541243b8a7facc38.png)

Hey Everybody,  
Please i would generate " Quick Values for message " graph

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [March 27, 2019, 9:52am UTC](https://community.graylog.org/t/quick-values-for-message/9587/11 "2019-03-27T09:52:38Z")

</div>

this is disabled for a reason by default …

… check your elasticsearch log, you might notice some Out-of-Memory error or something similar.

The error is a 500, so the backend (elasticsearch) returns an error on that field.

Again check your elasticsearch log.

---

<div class="post-metadata">

**Author:** ![Labidi](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/labidi/32/5597_2.png) [@Labidi](https://community.graylog.org/u/Labidi)\
**Post date:** [March 29, 2019, 10:53am UTC](https://community.graylog.org/t/quick-values-for-message/9587/12 "2019-03-29T10:53:02Z")

</div>

![qulick%20values%20messages](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/9/9be1d9cea9f854da7b033a0a8c7fc59b89e7c076.png)  
Hi @jan please explain to me i would have a quick values message graph ! how !!! i can’t fix this erreur !!

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [March 29, 2019, 11:56am UTC](https://community.graylog.org/t/quick-values-for-message/9587/13 "2019-03-29T11:56:35Z")

</div>

it is not possible.

The field `messages` holds a wide range of information, this field is analyzed and if you make it unique and count those it will break. That is the reason for the 500 …

You might want to normalize your logs, seperate the information that are in the message field into multiple different fields. Please read the community, You should fokus on reaching the goal, but not bending something into the position you like to have it.

---

<div class="post-metadata">

**Author:** ![Labidi](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/labidi/32/5597_2.png) [@Labidi](https://community.graylog.org/u/Labidi)\
**Post date:** [April 4, 2019, 7:59am UTC](https://community.graylog.org/t/quick-values-for-message/9587/14 "2019-04-04T07:59:27Z")

</div>

Hi @jan please I Want to Know Why when i spear systemctl status graylo-server.service … the service graylog " flops "…I searched for a lot…it’s weird; I hope you understand me

 ![floppe](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/b/b504c70bda642f9f7aa254c0d26a2e2b941e0d98.png)

---

<div class="post-metadata">

**Author:** ![Labidi](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/labidi/32/5597_2.png) [@Labidi](https://community.graylog.org/u/Labidi)\
**Post date:** [April 4, 2019, 8:04am UTC](https://community.graylog.org/t/quick-values-for-message/9587/15 "2019-04-04T08:04:40Z")

</div>

journalctl -xe

 ![ff](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/e/eac3518b9d4773e3301520c3e4463351c14a9742.png)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [April 18, 2019, 8:04am UTC](https://community.graylog.org/t/quick-values-for-message/9587/16 "2019-04-18T08:04:41Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
