Graylog2 / Graylog2/graylog2-server
Add `invert` parameter to remove_single_field and remove_multiple_fields
Open
7.3 candidate
feature
triaged
- Dominant language
- Java
- Stars
- 8.1k
- Forks
- 1.1k
- Avg merge
- 1d 20h
- Merged PRs (30d)
- 217
Description
## What?
Add `invert` parameter to `remove_single_field` and `remove_multiple_fields`
## Why?
`remove_single_field` and `remove_multiple_fields` replace the now deprecated `remove_field` function. However `remove_field` had an `invert` parameter which was quite valuable because in some cases, you cannot predict or know ahead of time what field names will be created when flattening json or key value expansion and setting the result as fields. Invert allows you to set an explicit list of known fields and then discard "noise".
Contributor guide
Assessment
This issue has not been assessed yet.