# ELK-5.0 Logstash geoip filter target "geoip", unable to remove fields

**URL:** <https://discuss.elastic.co/t/elk-5-0-logstash-geoip-filter-target-geoip-unable-to-remove-fields/66465>\
**Category:** Logstash\
**Created:** [November 17, 2016, 10:21pm UTC](https://discuss.elastic.co/t/elk-5-0-logstash-geoip-filter-target-geoip-unable-to-remove-fields/66465 "2016-11-17T22:21:48Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![sps90](https://avatars.discourse-cdn.com/v4/letter/s/6a8cbe/32.png) [@sps90](https://discuss.elastic.co/u/sps90)\
**Post date:** [November 17, 2016, 10:21pm UTC](https://discuss.elastic.co/t/elk-5-0-logstash-geoip-filter-target-geoip-unable-to-remove-fields/66465/1 "2016-11-17T22:21:48Z")

</div>

I am currently using ELK 5.0 version  
I need only few of the tags from the default "geoip" target.  
But i'm unable to delete the unwanted fields.  
I have tried the following settings, but none worked. I still see all the fields on the logstash pipeline.

1. 

![](https://us1.discourse-cdn.com/elastic/original/2X/4/4ea50ad623d2ec6668a1837b3f509da6d013c971.png)

1. 

![](https://us1.discourse-cdn.com/elastic/original/2X/c/c3022bbf6eb99c97a6c44b68c155fee13e61f818.png)

1. 

 ![](https://us1.discourse-cdn.com/elastic/original/2X/2/2ddc73cc7567e968dab46834ca6aa97f0c5a8b95.png)

TIA!

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [November 22, 2016, 8:58pm UTC](https://discuss.elastic.co/t/elk-5-0-logstash-geoip-filter-target-geoip-unable-to-remove-fields/66465/2 "2016-11-22T20:58:03Z")

</div>

Please don't post screenshots. Use copy/paste.

Please show an example event that isn't processed correctly. Use a `stdout { codec => rubydebug }` output.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 20, 2016, 8:58pm UTC](https://discuss.elastic.co/t/elk-5-0-logstash-geoip-filter-target-geoip-unable-to-remove-fields/66465/3 "2016-12-20T20:58:18Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.