How to drop the fields that Filebeat normally adds (type, source, offset, etc.)

Hi all
As the title says,but i didn't find the setting about it!

Hi @Junble,

I think the setting you are looking for is the drop_fields processor :slight_smile:

Prune filter and mutate filter will also work with remove_fields.

Hi @Junble ,

You can drop other fields except "type" and "@timestamp", Because these are the mandatory and default field of filebeat. drop_fields processor also can't drop these two fields

1 Like

Hi @jsoriano
Thank you, that's what I was looking for!

1 Like

Thank you! I'll try it!

OK,I see, thank you very much!

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.