Hello, using graylog 1.2.2, i'm facing issues with grok sub-patterns.
For example, with a message beginning with 2015-12-01 17:03:53,250, if in
my extractor i have %{TIMESTAMP_ISO8601:date}, the resulting fields are :
MONTHDAY
01
MONTHNUM
12
SECOND
53,250
YEAR
2015
date
2015-12-01 17:03:53,250
If i replace date with UNWANTED in the grok pattern, no more date field but
still MONTHDAY, MONTHNUM, SECOND and YEAR.
I don't want all these extra sub-patterns fields, how can i remove them ?
Ty
--
You received this message because you are subscribed to the Google Groups
"Graylog Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to graylog2+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/graylog2/122e2816-f733-4811-b776-2216eb1f0266%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
