I need to remove full_message or message field using logstash filter. Keep both these values increase the disk capacity. I tried following syntax under logstash filter. filter { grok { remove_field => ["full_message"] } } Above will not remove none of mentioned filed Then I tried followin…

How to remove full_message or message from log under filter

raihan (Raihan) December 3, 2019, 5:42am 4

@tharu85
Please put the full config, just wanna make sure if you are not renaming the fields.

Topic		Replies	Views
Remove message on filter before inserting in ES Logstash	4	6230	July 6, 2017
How can i remove field? Logstash	3	652	July 6, 2017
Can't remove_field - help please Logstash	9	3451	July 6, 2017
How to use logstash filter Logstash	10	2097	January 18, 2017
Unable to remove the field Logstash	2	690	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

How to remove full_message or message from log under filter

Related topics