Hi Folks,
We have few duplicate data fields we want to remove from events. One of them message.
If I'm removing "message" using logstash mutate, Kibana doesn't show those event in Discover tab at all.
Any suggestion?
Thanks in advance!
Why are you removing message?
Did you re-index the data? Refresh your mappings in Kibana?