-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 11.08.2014 15:52, ellyas ellyas wrote: > But in graylog2 after GELF input add a few fields with constant > values like "version" ( 1.0 ), "facility" ( gelf-rb ) and "level" ( > info[6] ). > > How to get rid of these unwelcome fields me?
These fields are added by logstash, or more precisely the gelf-rb module used to format GELF messages. They are added because they are required fields according to the GELF 1.0 spec. Changing that behaviour would require a change in the Ruby module and then Recompiling logstash. For me that was actually one reason not to use logstash with GELF, because version and facility are not only set if missing, but even overwritten if present. - -- Martin -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iEYEARECAAYFAlP2V2UACgkQrb26LrIR2Nl5ywCg1IhnkIY+3SFyFE9078iKsN+7 +JoAoLcJRPNs7mSqfuz0oYt5ay6CpRp0 =hSEF -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
