How to remove the information from the data stream of the agent

Elastic Stack Elasticsearch
1

Hello everyone,

I've been struggling with the following values for a few days now: agent.ephemeral_id,agent.id,agent.name,agent.type,agent.version

I use the plugin Palo Alto to transfer the logs to elasticserach and these values are passed into every document. Where can I remove the values from the datastream? I have already dropped the data in the plugin settings under advanced, unfortunately without success :frowning:

Maybe someone knows how I can switch it off.

Many thanks in advance
Dominik

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.