Delete default tag

Elastic Stack Logstash
1

I was searching for this porblem but I don`t find resolved.
On my every log in Logstash I have tag "beats_input_codec_plain_applied".

I`m add some my tags and this tag is very confusing.
Tag is my very important field and I want to delete this. How can I do this ?

I am use ELK stack.

2

Try this:

filter {
    if "beats_input_codec_plain_applied" in [tags] {
        mutate {
            remove_tag => ["beats_input_codec_plain_applied"]
        }
    }
}
2 Likes
3

I have this problem too.

I think you kan set filebeat fields_under_root: false or change add field name.

4

Yes, thank you. This help me.

5

在哪里设置？ 说明白啊
Where to set up？