How to restrict nodes while indexing to elastic search

Elastic Stack Beats
1

Hi,

I am trying to index application logs to elastic search using file beats.
Here I observed in elastic search, it created for each document hosts,agent..etc nodes, but I am interested only in message field Node.

image
image749×244 6.58 KB

so is there a way to restrict these nodes with out indexing to elastic search with in beats module ?
(or)
do we have to use logstash in middle to mutate the fields?

Please suggest on the same.

Thanks,
Rakesh Katakam.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.