Hi.
I have filebeat (version 7.6.1) deployed in k8s and some application. This application generates a lot of json data that is parsed. I want to drop some json fields from the filebeat output. The problem is that the names of fields are dynamic but the beginning of field name always is "affected_tmp_". So I want to delete all fields using regex "affected_tmp*".
How can I configure that in filebeat?
I found the similar question but there was no answer
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.