Drop_fields not working


The config below doesn't drop fields.

- module: system
  period: 10m
    - process
    - process_summary
    #- core
    - diskio
    #- socket
  processes: ['.*']
    by_cpu: 5      # include top 5 processes by CPU
    by_memory: 5   # include top 5 processes by memory
    - drop_fields.fields: ["beat.version"]

You must correct the indentation of the processors here an put it on the top level to be able to remove beat.version.

Note: Be aware that removing beat.version could cause issues with the index pattern etc.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.