How to exclude the "Time" field for monitors that send to Webhooks?
Right now, our alerts to slack are:
[{"date":"2020-06-03 23:17:28.017","msg":"<my message>","Time":1591226248017}]
how do i exclude the "time" field?
current sumologic query looks similar to:
_sourceCategory=<category>
| parse ": *" as msg
| fields -_raw, _sourceCategory, _collector, _sourceHost, _sourceName,_receiptTime
but the "Time" is still present
Please sign in to leave a comment.
Comments
1 comment