# Empty fields appear in InfluwDB filled with the variable name, i.e. %{\[kubernetes\_node\_name\]}

**URL:** <https://discuss.elastic.co/t/empty-fields-appear-in-influwdb-filled-with-the-variable-name-i-e-kubernetes-node-name/222718>\
**Category:** Logstash\
**Created:** [March 9, 2020, 1:55pm UTC](https://discuss.elastic.co/t/empty-fields-appear-in-influwdb-filled-with-the-variable-name-i-e-kubernetes-node-name/222718 "2020-03-09T13:55:44Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![jeanflorentine](https://avatars.discourse-cdn.com/v4/letter/j/f475e1/32.png) [@jeanflorentine](https://discuss.elastic.co/u/jeanflorentine)\
**Post date:** [March 9, 2020, 1:55pm UTC](https://discuss.elastic.co/t/empty-fields-appear-in-influwdb-filled-with-the-variable-name-i-e-kubernetes-node-name/222718/1 "2020-03-09T13:55:44Z")

</div>

In InfluxDB output plugin configured with:  
data\_points =\> {  
"\_kubernetes\_namespace" =\> "%{[kubernetes\_namespace]}"  
"\_field\_env" =\> "%{[field\_env]}"  
"\_event\_dataset" =\> "%{[event\_dataset]}"  
"\_kubernetes\_pod\_name" =\> "%{[kubernetes\_pod\_name]}"  
"\_kubernetes\_container\_name" =\> "%{[kubernetes\_container\_name]}"  
"\_kubernetes\_node\_name" =\> "%{[kubernetes\_node\_name]}"  
}

I get the output:

> select \* from K8S\_E4\_V2 limit 10  
> name: K8S\_E4\_V2  
> time \_event\_dataset \_field\_env \_kubernetes\_container\_name \_kubernetes\_namespace \_kubernetes\_node\_name \_kubernetes\_pod\_name

* * *

1583761536000000000 system.cpu caa %{[kubernetes\_container\_name]} %{[kubernetes\_namespace]} %{[kubernetes\_node\_name]} %{[kubernetes\_pod\_name]}  
1583761536275000000 system.load caa-hors-prod %{[kubernetes\_container\_name]} %{[kubernetes\_namespace]} %{[kubernetes\_node\_name]} %{[kubernetes\_pod\_name]}  
1583761536276000000 system.cpu caa-hors-prod %{[kubernetes\_container\_name]} %{[kubernetes\_namespace]} %{[kubernetes\_node\_name]} %{[kubernetes\_pod\_name]}  
1583761536556000000 system.load caa-hors-prod %{[kubernetes\_container\_name]} %{[kubernetes\_namespace]} %{[kubernetes\_node\_name]} %{[kubernetes\_pod\_name]}  
1583761536575000000 kubernetes.system caa %{[kubernetes\_container\_name]} %{[kubernetes\_namespace]} worker-002 %{[kubernetes\_pod\_name]}  
1583761536576000000 system.process caa %{[kubernetes\_container\_name]} %{[kubernetes\_namespace]} %{[kubernetes\_node\_name]} %{[kubernetes\_pod\_name]}  
1583761536577000000 kubernetes.container caa argo-operator kube-system worker-002 argo-operator-deployment-7fcccb6d6d-k5sc6  
1583761536579000000 kubernetes.volume caa %{[kubernetes\_container\_name]} caci-e4-production worker-002 communication-e4-prd-c98f9dfb-bmj9r  
1583761536582000000 system.socket caa %{[kubernetes\_container\_name]} %{[kubernetes\_namespace]} %{[kubernetes\_node\_name]} %{[kubernetes\_pod\_name]}  
1583761536781000000 system.load caa %{[kubernetes\_container\_name]} %{[kubernetes\_namespace]} %{[kubernetes\_node\_name]} %{[kubernetes\_pod\_name]}

> 

that means that empty fields are filled with the variable name.  
I tried to prevent this of occuring with different ways, but none is actually working:

if [field][env] == "" {  
#mutate { remove\_field =\> ["field\_env"] }  
mutate { copy =\> { "NULL" =\> "%{[field\_env]}" } }  
#mutate { remove\_field =\> ["%{field\_env}"] }  
}  
if ![event][dataset] {  
#mutate { remove\_field =\> ["event\_dataset"] }  
mutate { copy =\> { "NULL" =\> "%{[event\_dataset]}" } }  
#mutate { remove\_field =\> ["%{event\_dataset}"] }  
}  
if ![kubernetes][pod][name] {  
#mutate { remove\_field =\> ["kubernetes\_pod\_name"] }  
mutate { copy =\> { "NULL" =\> "%{[kubernetes\_pod\_name]}" } }  
#mutate { remove\_field =\> ["%{kubernetes\_pod\_name}"] }  
}  
if ![kubernetes][container][name] {  
#mutate { remove\_field =\> ["kubernetes\_container\_name"] }  
mutate { copy =\> { "NULL" =\> "%{[kubernetes\_container\_name]}" } }  
#mutate { remove\_field =\> ["%{kubernetes\_container\_name}"] }  
}  
if ![kubernetes][node][name] {  
#mutate { remove\_field =\> ["kubernetes\_node\_name"] }  
mutate { copy =\> { "NULL" =\> "%{[kubernetes\_node\_name]}" } }  
#mutate { remove\_field =\> ["%{kubernetes\_node\_name}"] }  
}

How can I prevent the empty field to appear in output as the variable name ???

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 6, 2020, 1:55pm UTC](https://discuss.elastic.co/t/empty-fields-appear-in-influwdb-filled-with-the-variable-name-i-e-kubernetes-node-name/222718/2 "2020-04-06T13:55:54Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.