> >These fields are added by logstash, or more precisely the gelf-rb > >module used to format GELF messages. They are added because they are > >required fields according to the GELF 1.0 spec.
Did you probably mean values of that fields, but not fields itself? I have tried to use Syslog UDP input without logstash, and there are also these 2 fields "facility" = "unknown" and "level" = "Invalid [-1]" (values are different from GELF). "Version" is gone. -- You received this message because you are subscribed to the Google Groups "graylog2" group. To unsubscribe from this group and stop receiving emails from it, send an email to graylog2+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.