Hi, I am using metricbeat for system monitoring. However, that gives some default fields beat.hostname, beat.name etc, which I dont want. How to remove those? br, Sunil

The field is metricset.rtt. So try processors: - drop_fields: fields: ['metricset.rtt'] or equivalently: processors: - drop_fields.fields: ['metricset.rtt']

How to remove Metricbeat default fields

Elastic Stack Beats

rherr63 December 12, 2016, 6:07pm 4

Is the format as follows in MetricBeats.yml?
processors:

drop_fields:
fields: "rtt"

I have tried the above and also ["rtt"] and it still not removing the rtt field and data when viewing data in Kinesis Analytics

Restrict/Remove unnecessary fields in MetricBeat

Topic		Replies	Views
The metric beat index size is incrasing rapidly.can we remove some of the fields present in the index Beats elastic-stack-monitoring , metricbeat	2	225	October 10, 2023
Drop_fields not working Beats metricbeat	2	490	May 17, 2018
Drop_fields and the beats.name/.hostname/.version fields Beats metricbeat	6	1080	January 15, 2018
Dropping fields doesnt work Beats metricbeat	5	1396	August 22, 2017
Restrict/Remove unnecessary fields in MetricBeat Beats metricbeat	2	679	September 11, 2018

How to remove Metricbeat default fields

Related topics