CSV export in discover without . keyword fields


I am using 8.11x stack in my cluster and I want to extract CSV export in discover without .keyword fields. Is there any way to do this? other than selecting available fields from left side of discover page or data table visualization.

Hi @sai7276p,

Welcome back! Aside from the way you describe you could script the report generation as covered here and filter out the fields. Whether to use one or the other in opinion depends on whether this is a one off request, where selecting the fields in discover is probably easier, or a regular request that might be useful to schedule.

Hope that helps!

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.