Description |
If event matches Condition remove fields FieldNameList. |
|
|
Comments |
If FieldNameList is unspecified or empty, do nothing. Just remove the first element corresponding to each FieldName. If FieldNameList has multiple occurrences of a FieldName, remove that many duplicates if they exist. |
<filter objectId="Filter.RemoveFields" type="RemoveFieldsFilter"> <parameter type="Condition"> <negatePrimaryCondition>false</negatePrimaryCondition> <conditionRelation>Any</conditionRelation> <conditionSpec> <negate>false</negate> <fieldName>ev:msg</fieldName> <operator>containsString</operator> <valueType>string</valueType> <value>delete</value> </conditionSpec> </parameter> <parameter type="FieldNameList"> <fieldName>ev:protocol</fieldName> <!—0 to N of these --> <fieldName>ev:header</fieldName> </parameter> </filter>