Catenate two fields as message


(Anton) #1

I got the logs ui working with my own index. However, message and loglevel are two different fields.

Is it possible to catenate level and message so that both are shown in logs ui?


(Christian Dahlqvist) #2

Usually the message field contains the full message. Is that not the case for your logs?


(Anton) #3

Not in our case, no. I guess it might be possible to massage the data in logstash to make it work.
Was just curious if it was possible. It would be nice if such functionality was added.


(Felix Stürmer) #4

Thank you for the suggestion, @Anton1! Making the reconstruction of the log message customizable is definitely on our list. Right now though, creating a merged message field during ingestion in Logstash would be the way to go.