Custom Eventlog Data about log4stash HOT 2 CLOSED

There are two ways you can remove fields:

• Using FixedFields configuration parameter
• Using Remove Filter

Using FixedFields configuration parameter:

If all you want is to remove all the default fields from log4net you might use the FixedFields configuration, For example to remove all but the message use this:

<FixedFields>Message</FixedFields>

You can also combine two or more fields.
To read more about FixedFields please refer to log4net.Core.FixFlags

Using Remove Filter:

For example to remove the ThreadName just add this to your configuration:

<ElasticFilters>
    <Remove>
        <Key>ThreadName</Key>
    </Remove>
</ElasticFilters>

Take a look at these filters for more information:

• Add - add new key and value to the event.
• Remove - remove key from the event.
• Rename - rename key to another name.

Unfortunately there is no way to move field from inner place to outer, if more folks will desire such behavior I will try to add it.

from log4stash.

That sums it up,
Thanks!!!

from log4stash.