Graylog2 / Graylog2/graylog2-server

Add `invert` parameter to remove_single_field and remove_multiple_fields

Open
#22,784 1 comment 0 reactions 0 assignees View on GitHub
7.3 candidate feature triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

## What?

Add `invert` parameter to `remove_single_field` and `remove_multiple_fields`

## Why?

`remove_single_field` and `remove_multiple_fields` replace the now deprecated `remove_field` function. However `remove_field` had an `invert` parameter which was quite valuable because in some cases, you cannot predict or know ahead of time what field names will be created when flattening json or key value expansion and setting the result as fields. Invert allows you to set an explicit list of known fields and then discard "noise".

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.