Graylog2 / Graylog2/graylog2-server

Add field grouping mechanism

Open
#10,966 0 comments 0 reactions 0 assignees View on GitHub
feature
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

## What?

In various places, users would like to access "internal" fields (most of which are currently prefixed by `gl2_`) because they are of legitimate interest. But sometimes those fields get in the way because they might not be easily understandable to less technical users.
Some of the places are:
* field list in the sidebar
* dropdown in parameter value list
* message details
* aggregation builder

## Why?
E.g. selecting `gl2_event_type` in a parameter value dropdown is currently not possible, because "internal" fields are filtered out there. However, it's not really internal, it's just prefixed to avoid clashes with other user-generated fields.
Wholesale displaying all fields everywhere might be very noisy, but we don't have a way of expressing this in the UI.

## Your Environment

* Graylog Version: 4.1
* Elasticsearch Version: n/a
* MongoDB Version: n/a
* Operating System: n/a
* Browser version: n/a

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.