Hi,
One way of filtering out unnecessary fields from events in logstash is by using the drop/remove field filter.
This field will remove those fields and only the remaining fields will be mapped or stored in Elasticsearch.
filter {
drop {
remove_field => [ "foo_%{somefield}" ]
}
}
You can refer the below doc if you need additional information.
Thanks,
Asish