# Filebeat, ship logs raw

**URL:** <https://discuss.elastic.co/t/filebeat-ship-logs-raw/209536>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [November 26, 2019, 3:01pm UTC](https://discuss.elastic.co/t/filebeat-ship-logs-raw/209536 "2019-11-26T15:01:28Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![gborg](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gborg/32/58934_2.png) [@gborg](https://discuss.elastic.co/u/gborg)\
**Post date:** [November 26, 2019, 3:01pm UTC](https://discuss.elastic.co/t/filebeat-ship-logs-raw/209536/1 "2019-11-26T15:01:28Z")

</div>

Hello, I am wondering if there is an option to have filebeat only send the data it collects, not all the fields it adds itself like agent, ecs, etc

My problem is that due to filebeat setting host.name, it overwrites my logs field called host and then breaks my logstash configuration.

I am experimenting with solutions to this but in this use case what would be best for me is just to not create all that extra data

---

<div class="post-metadata">

**Author:** ![kvch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kvch/32/72058_2.png) [@kvch](https://discuss.elastic.co/u/kvch)\
**Post date:** [November 27, 2019, 2:09pm UTC](https://discuss.elastic.co/t/filebeat-ship-logs-raw/209536/2 "2019-11-27T14:09:34Z")

</div>

Have you tried using the `drop_fields` processor of Filebeat? [https://www.elastic.co/guide/en/beats/filebeat/current/drop-fields.html](https://www.elastic.co/guide/en/beats/filebeat/current/drop-fields.html)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 25, 2019, 2:10pm UTC](https://discuss.elastic.co/t/filebeat-ship-logs-raw/209536/3 "2019-12-25T14:10:04Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.