Hello, using graylog 1.2.2, i'm facing issues with grok sub-patterns.
For example, with a message beginning with 2015-12-01 17:03:53,250, if in
my extractor i have %{TIMESTAMP_ISO8601:date}, the resulting fields are :
MONTHDAY
01
MONTHNUM
12
SECOND
53,250
YEAR
2015
date
2015-12-01 17:03:53,250
If i replace date with UNWANTED in the grok pattern, no more date field but
still MONTHDAY, MONTHNUM, SECOND and YEAR.
I don't want all these extra sub-patterns fields, how can i remove them ?
Ty
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/122e2816-f733-4811-b776-2216eb1f0266%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
