I need to remove full_message or message field using logstash filter. Keep both these values increase the disk capacity. I tried following syntax under logstash filter. filter { grok { remove_field => ["full_message"] } } Above will not remove none of mentioned filed Then I tried followin…

How to remove full_message or message from log under filter

system (system) Closed December 31, 2019, 5:51am 6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Remove message on filter before inserting in ES Logstash	4	6231	July 6, 2017
How can i remove field? Logstash	3	654	July 6, 2017
Can't remove_field - help please Logstash	9	3455	July 6, 2017
How to use logstash filter Logstash	10	2100	January 18, 2017
Unable to remove the field Logstash	2	690	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

How to remove full_message or message from log under filter

Related topics