You could work this around by rewriting messages with drools like here: http://docs.graylog.org/en/1.3/pages/drools.html, with modify($m) { removeField("unwantedField") }
W dniu piątek, 29 stycznia 2016 10:38:03 UTC+1 użytkownik thePretender napisał: > > Hi, > > For normalization purposes, I want to rename certian fields from a > JSON-extracted message. I have tried using the copy input extractor and > make it cut the field, and that seems to work. However, I am left with both > the new field with the correct value, and the old field with the value > "fullyCutByExtractor", why isn't this being removed? That seems rather > ineffective. > > regards, > thePretender > -- You received this message because you are subscribed to the Google Groups "Graylog Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/graylog2/d9585e50-4b4e-4335-a81f-b3a50b607b7b%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
