Drop fields generated by beats

Elastic Stack Logstash
1

Hello,
I'm using filebeats on windows to sent a csv file.

It's working well but, in Kibana, I see a lot of fields I don't use so I would like to drop them.
The fields are : host.os.build, host.os.name, host.os.family etc...

I have done a test with another field no created by beats, it works.
So it's possible to drop system fields ?

Thank you

2

This is how I remove some unneeded fields in Logstash

  #############
  # Remove redundant fields
  mutate {
    remove_field => [ "[offset]", "[@version]", "[jsonPayload][res][header]", "[jsonPayload][timestamp]" ]
  }
  #############

This goes into the filter section, in case that was unclear :smiley:

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.