How drop messages with total fields bigger than 1000

I am receiving a lot of Limit of total fields [1000] errors. I increase the size to 2000 but the errors still occurs and dont want to increase the limit to bigger size . I was not able to find a filter or other way, how to drop messages that exceeds specified limit. There is a lot of microservices I am harvesting logs from, and more comes every month. Is there a way how to filter this documents?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.