# Drop fields with key that contain string and value \<1
**URL:** https://discuss.elastic.co/t/drop-fields-with-key-that-contain-string-and-value-1/271672
**Category:** Logstash
**Created:** [April 29, 2021, 3:07pm UTC](https://discuss.elastic.co/t/drop-fields-with-key-that-contain-string-and-value-1/271672 "2021-04-29T15:07:09Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@Mike\_Clarke](https://discuss.elastic.co/u/Mike_Clarke)
#### Post date: [April 29, 2021, 3:07pm UTC](https://discuss.elastic.co/t/drop-fields-with-key-that-contain-string-and-value-1/271672/1 "2021-04-29T15:07:09Z")
I have a document that contains multiple fields with name `metrics.time.*`. I would like to be able to drop all fields from the event that have `key => metrics.time*` and `value < 1`. Can this be accomplished? I tried doing something like this which doesn't work
```auto
filter {
ruby {
code => "
event.to_hash.each { |key, value|
if key =~ metrics.time and value <=1 then
event.remove(key)
}
"
}
}
```
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [April 29, 2021, 5:53pm UTC](https://discuss.elastic.co/t/drop-fields-with-key-that-contain-string-and-value-1/271672/2 "2021-04-29T17:53:02Z")
If you run this configuration the metrics.time.foo field will have been removed from the event
```
input { generator { count => 1 lines => [''] } }
filter {
mutate { add_field => { "[metrics.time.foo]" => 0.8 } }
mutate { convert => { "[metrics.time.foo]" => "float" } }
ruby {
code => '
event.to_hash.each { |key, value|
if key =~ /metrics.time/ and value <= 1 then
event.remove(key)
end
}
'
}
}
output { stdout { codec => rubydebug { metadata => false } } }
```
If that does not work for your events then make sure that value is a float (or .to\_f it in the ruby filter, but note that for things that are not actually floats .to\_f will return zero). Also, do you really have periods in name of the field or do you have [metrics][time][someField]?
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 27, 2021, 5:53pm UTC](https://discuss.elastic.co/t/drop-fields-with-key-that-contain-string-and-value-1/271672/3 "2021-05-27T17:53:24Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.