How to remove Metricbeat default fields


(Sunil Chaudhari) #1

Hi,
I am using metricbeat for system monitoring.
However, that gives some default fields beat.hostname, beat.name etc, which I dont want.
How to remove those?

br,
Sunil


(Steffen Siering) #2

Processors can remove fields.


#3

Is it possible to remove the 'rtt' field from each of the metrics? If so, how is this accomplished?


#4

Is the format as follows in MetricBeats.yml?
processors:

  • drop_fields:
    fields: "rtt"

I have tried the above and also ["rtt"] and it still not removing the rtt field and data when viewing data in Kinesis Analytics


Restrict/Remove unnecessary fields in MetricBeat
(Andrew Kroh) #5

The field is metricset.rtt. So try

processors:
- drop_fields:
    fields: ['metricset.rtt']

or equivalently:

processors:
- drop_fields.fields: ['metricset.rtt']

#6

Awesome, worked great. Thanks!


(system) #7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.