Deleting @Version and @Timestamp fields in Logstash 2.2.2

Elastic Stack Logstash
1

Hello,

I am using Logstash pipeline to re-index ES 2.1.2 index from cluster A to cluster B. New index is created, but logstash adds it's own @version and @timestamp to records. Is there a way to delete these 2 fields via mutate right before the write. I don't really care when the record was processed by logstash, as this index is a datastore, and I can't have the json altered. The reason I am using logstash, is because snapshot fails on one shard, so I get partial snapshot.

Thanks in advance

1 Like
2

I actually applied the mutate filter

filter {
mutate {
remove_field => ["@version", "@timestamp"]
}
}

And it's working, this topic can be closed

2 Likes
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.