Is it possible to remove Beat Fields without using processors?



I am using ELK GA 6.3.0. I use filebeat to read log files. I have noticed filebeat is shipping it's meta along with log file's content, like;

"beat" => {
    "version" => "6.3.0",
    "name" => "iflyresdev70",
    "hostname" => "iflyresdev70"

i sit possible to remove all these without using processors?? I just want to export log data, and nothing more.


(Noémi Ványi) #2

May I ask what is the problem with removing fields using the processors of Filebeat?


I haven't seen any problem yet, but just in case if there is any performance issue, since the processors might consume cpu. Is there any chance?

(system) #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.