Drop fields not working in filebeat

Elastic Stack Beats
1

I'm trying to remove fields by using the drop fields, the syntax is as follows :

but it doesn't seem to work, any idea why?

2

Hi!

According to the docs the configuration looks ok.
Can you share the complete filebeat's configuration?

3

I think it has something to do with the fields I'm trying to delete, so are there any fields that cannot be deleted?

4

Can you show indexed document as JSON ?

And please share the full filebeat config if possible.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.