I collect the network packet data through the 'tshark' and then the packet is filtered through logstash.
But there are a lot of fields in packet data so when I see data in the elasticsearch, there are a lot of fields those are not need to use.
I only need timestamp, ip, port, http response. How to remove the other fields?
(I used elasticsearch mapping in dev tools(kibana) but all the fields are still appear.)