<p dir="ltr">On the wire or in files? In files, you are jn complete control with the template option.</p>
<p dir="ltr">On the wire you can set .SDATA.meta.sequenceId to an empty string, that should drop the sdata if I remember correctly.</p>
<p dir="ltr">But why do you want to do this?</p>
<div class="gmail_quote">On Mar 27, 2014 6:41 PM, "Ou, Jimmy" <<a href="mailto:Jimmy.Ou@viasat.com">Jimmy.Ou@viasat.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div>
<p class="MsoNormal">Hello,<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I am having problem removing the structured data in the syslog message.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">My test logs show the following:<u></u><u></u></p>
<p class="MsoNormal"><113>1 2014-11-25T11:00:00+00:00 10.1.1.1 RedBox - - <span style="color:red">
[meta sequenceId=”16”] </span>@cee:[{“host”:”10.1.1.1”}]<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I want it to look like the following without the sequenceId tag:<u></u><u></u></p>
<p class="MsoNormal"><113>1 2014-11-25T11:00:00+00:00 10.1.1.1 RedBox - - <span style="color:red">
-</span> @cee:[{“host”:”10.1.1.1”}]<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Is there an option to turn this meta data off?<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Thanks,<u></u><u></u></p>
<p class="MsoNormal">Jimmy<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<br>______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
<br></blockquote></div>