Cannot drop fields from checkpoint filebeat module

Hello everyone, I am using filebeat checkpoint module and want to reduce the log size of the logs, cutting fields like

My /etc/filebeat/filebeat.yml contains:

    - drop_fields:
                  event.module: "checkpoint"
           fields: [""]

The same syntax is working fine for other filebeat modules such as imperva.

drop_event is also working fine but drop_fields is not dropping anything at all.
Tried as well as with fields: [""] but failed as well

Any ideas?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.