Either selects only specific fields or selectively excludes only specific fields.
fields [-] FIELD, ...
- List of fields. Use comma (
,) as a separator.
- Exclude the fields after the minus symbol (
-), these fields are excluded from the output. If you omit this sign, only those fields are selected.
Select only the src_ip and action fields.
fields src_ip, action
Remove only the line field
fields – line