Hi There! I am trying to ignore the fields a4, a5, a6....., a1100 from my audit logs and tried applying prune filter plugin with setting blacklist_names, but I see the fields a4, a5, a6..... are still incoming. Can someone let me know if this is the correct way we use regex for prune Or suggest an…

Badger July 23, 2019, 2:22pm 2

No, it does not work that way. See this post.

Topic		Replies	Views
Using Prune Filter To Remove Null Value Fields Logstash	4	3986	August 19, 2019
How to filter/remove fields that have certain naming pattern Logstash	4	1142	May 4, 2017
Looking for a way to prune fields with certain text in them but struggling with the prune filter and regex Logstash	2	1016	November 28, 2018
Remove fields that match regex Logstash	13	4294	July 12, 2018
Drop field based on pattern Logstash	4	277	July 20, 2021

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Issue with regex pattern for prune filter plugin blacklist_names

Related topics