Import a lot of wrong data

[zero.lim (zero)]

Hi all ,

I want to transfer the data of aws cloudwatch (cloudfront) to elasticsearch
But I found that my elasticsearch has a lot of redundant information. Why?

I don't want the information in the two pictures

I only need the cloudfront information (filebeat runs every 5 minutes), and I do n’t want anything else. How should I set it up? What needs to be removed?

thanks ...

[shaunak (Shaunak Kashyap)]

You are referring to Filebeat but in your configuration I see metricsets, indicating that you are using Metricbeat. For Metricbeat, the system module is enabled by default, which is why you are seeing fields like system.* in your Kibana Discover.

Try running metricbeat modules disable system and then restart Metricbeat. This will stop Metricbeat from indexing data into system.* fields in the future.

Shaunak