I want to output an event to elasticsearch, but I really only want to have 4 - 6 fields in the index, but the event is coming in with 130 fields. I know that I can use the remove_field array in a mutate or other filter, but that means that I would have to list out 120+ field names in the logstash c…

How to write only specific fields to elasticsearch from logstash

MikeM (Mike) March 12, 2016, 10:34pm 3

Not a file. It's a log being sent to logstash on a TCP port.

Topic		Replies	Views
Elasticsearch output filter Logstash	2	386	December 9, 2016
Selective fields per output Logstash	2	1809	July 6, 2017
Add filter to send specific fields to elasticsearch Logstash	12	1769	March 12, 2019
Get only specific fields from a data file Logstash	3	547	September 16, 2019
Ingest Specific Json fields to Elastichsearch Logstash	3	423	January 2, 2018

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

How to write only specific fields to elasticsearch from logstash

Related topics