How to remove Metricbeat default fields

Elastic Stack Beats
1

Hi,
I am using metricbeat for system monitoring.
However, that gives some default fields beat.hostname, beat.name etc, which I dont want.
How to remove those?

br,
Sunil

2

Processors can remove fields.

3

Is it possible to remove the 'rtt' field from each of the metrics? If so, how is this accomplished?

4

Is the format as follows in MetricBeats.yml?
processors:

  • drop_fields:
    fields: "rtt"

I have tried the above and also ["rtt"] and it still not removing the rtt field and data when viewing data in Kinesis Analytics

5

The field is metricset.rtt. So try

processors:
- drop_fields:
    fields: ['metricset.rtt']

or equivalently:

processors:
- drop_fields.fields: ['metricset.rtt']
6

Awesome, worked great. Thanks!

7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.