Ability to select showed fields

[rosaLux161]

Outputting all fields can be quite confusing. So I created a new field that takes comma separated field names that are output. If the field remains empty, all fields are displayed by default.

Before:

BANANARANA
Stream : Syslog messages
Trigger Condition: *

Matching messages:
Message: *
Source: *
Stream Ids: [*, 000000000000000000000001]
Fields:
{filebeat_log_offset=1791417, filebeat_logging_date=May 6 14:40:00, gl2_remote_ip=*, gl2_remote_port=33924, filebeat_agent_hostname=*, beats_type=filebeat, gl2_source_input=*, filebeat_@metadata_beat=filebeat, filebeat_@timestamp=2020-05-11T08:24:21.484Z, filebeat_agent_type=filebeat, filebeat_@metadata_version=7.6.2, filebeat_host_name=*, gl2_source_node=* filebeat_agent_version=7.6.2, filebeat_agent_ephemeral_id=*, gl2_accounted_message_size=810, filebeat_input_type=log, filebeat_hostname=*, gl2_message_id=*, filebeat_tags=[syslog], timestamp_2=2020-05-06T14:40:00.000Z, filebeat_ecs_version=1.4.0, filebeat_@metadata_type=_doc, filebeat_source=*, filebeat_app=affenbrot, filebeat_agent_id=*, filebeat_log_file_path=/var/log/syslog}

After:

 *
Stream : Syslog messages
Trigger Condition: *

Matching messages:
Message: This is an error blaubeere
Source: *
Stream Ids: [*, 000000000000000000000001]
Fields:
filebeat_hostname = *
filebeat_tags = [syslog]
filebeat_ecs_version = 1.4.0
filebeat_app = affenbrot

[crazydisi]

Very usefull. Please consider this to be Merged!

[rosaLux161]

Anyone here? 😢

[faziletozer]

We have an issue to try this merge request. However, it can take a while as we have some other priorities right now. Once we see if it is working as expected, we will merge it. Thank you!

[rosaLux161]

Any updates on this?

[ghost]

We have an issue to try this merge request. However, it can take a while as we have some other priorities right now. Once we see if it is working as expected, we will merge it. Thank you!

Is there any ETA? We would really appreciate that feature.

[faziletozer]

We will have the issue in our next sprint.

[uraviOG]

@rosaLux161 , please check the comments & see if it is applicable, Afterwards we can go ahead and merge. Thanks