Drop metadata fields using drop_fields processor in elastic agent config

Elastic Stack Beats
1

Hi guys,

I've issues to drop some metadata fields in the elastic agent config using the drop_fields processor.

I tried to configure the processor in the agent.yml inputs section:

inputs:
  - id: b21f2d23-1bf5-4e0b-852f-96eb58a774a1
    name: kubernetes-container-logs
    revision: 1
    type: logfile
    use_output: default
    meta:
      package:
        name: kubernetes
        version: 1.1.0
    data_stream:
      namespace: test
    streams:
      - id: logfile-kubernetes.container_logs-b21f2d23-1bf5-4e0b-852f-96eb58a774a1
        data_stream:
          dataset: kubernetes.container_logs
          type: logs
        paths:
          - '/var/log/containers/*${kubernetes.container.id}.log'
        symlinks: true
        processors:
          - drop_fields:
                fields: ["host.name"]

Unfortunately I'm still seeing the field in Elasticsearch.

Can you give me a hint, what's wrong?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.