Graylog2 / Graylog2/graylog2-server

Assign a Default Message Table Configuration Per Stream

Open
#15,728 2 comments 3 reactions 0 assignees View on GitHub
feature triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

## What?
When you select a single stream from the main search page or the Streams web page, you should be able to have a user configured default message table that loads which has configured fields relevant to that log type. Either as a new type of saved information on the Stream or linking a stream to a specific saved search maybe?

For example, I can create and assign a message table config on a Cisco Umbrella DNS stream that by default has various fields added to the table such as the query request, the response status, associated user etc.

Unsure how it would work with multiple streams selected in the search pane, maybe it reverts back to the default timestamp, source and message preview when multiple are selected.

## Why?
With the existence of saved searches, this is not a huge issue as its only a couple extra steps to load in a saved search however it would be nice to assign that saved search or some variant of it as the default view that loads when you open a stream.

## Your Environment

* Graylog Version: 5.0.6
* Elasticsearch Version: 2.3
* MongoDB Version: 5
* Operating System:Ubuntu 2204
* Browser version: Edge 114

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.