Hi! I'd like to remove inner filed "message"becouse its epmty. How can i make this? My rule: if [message] == "" { drop { } } But its not working. Can anyone take advice for me? [image]

How can i remove field?

Topic		Replies	Views
Logstash if message is empty, drop the entire row Logstash	10	8021	April 3, 2020
Remove message on filter before inserting in ES Logstash	4	6231	July 6, 2017
How to remove field with logstash5.0.2? Logstash	3	813	January 4, 2017
How to remove a field Logstash	2	447	July 6, 2017
Unable to remove the field Logstash	2	690	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

How can i remove field?

Related topics