I have filebeat (version 7.6.1) deployed in k8s and some application. This application generates a lot of json data that is parsed. I want to drop some json fields from the filebeat output. The problem is that the names of fields are dynamic but the beginning of field name always is "affected_tmp_". So I want to delete all fields using regex "affected_tmp*".
How can I configure that in filebeat?
I found the similar question but there was no answer
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.