# Can I save the fields that I only want?

**URL:** https://discuss.elastic.co/t/can-i-save-the-fields-that-i-only-want/329736
**Category:** Elasticsearch
**Created:** [April 11, 2023, 10:57am UTC](https://discuss.elastic.co/t/can-i-save-the-fields-that-i-only-want/329736 "2023-04-11T10:57:49Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![lilyyy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lilyyy/32/51129_2.png) [@lilyyy](https://discuss.elastic.co/u/lilyyy)
#### Post date: [April 11, 2023, 10:57am UTC](https://discuss.elastic.co/t/can-i-save-the-fields-that-i-only-want/329736/1 "2023-04-11T10:57:49Z")

</div>

Hello all.  
I collect the network packet data through the 'tshark' and then the packet is filtered through logstash.  
But there are a lot of fields in packet data so when I see data in the elasticsearch, there are a lot of fields those are not need to use.

I only need timestamp, ip, port, http response. How to remove the other fields?

(I used elasticsearch mapping in dev tools(kibana) but all the fields are still appear.)

Thank you.

---

<div class="post-metadata">

### Author: ![TimBosman](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timbosman/32/84120_2.png) [@TimBosman](https://discuss.elastic.co/u/TimBosman)
#### Post date: [April 11, 2023, 1:47pm UTC](https://discuss.elastic.co/t/can-i-save-the-fields-that-i-only-want/329736/2 "2023-04-11T13:47:20Z")

</div>

Hey,

I think you are looking for the [Logstash Pruning filter](https://www.elastic.co/guide/en/logstash/current/plugins-filters-prune.html).

Tim

---

<div class="post-metadata">

### Author: ![lilyyy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lilyyy/32/51129_2.png) [@lilyyy](https://discuss.elastic.co/u/lilyyy)
#### Post date: [April 13, 2023, 1:29pm UTC](https://discuss.elastic.co/t/can-i-save-the-fields-that-i-only-want/329736/3 "2023-04-13T13:29:34Z")

</div>

It worked for me!  
Thank you so much.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 11, 2023, 1:30pm UTC](https://discuss.elastic.co/t/can-i-save-the-fields-that-i-only-want/329736/4 "2023-05-11T13:30:17Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
