JSON Filtering In Logstash To Remove Unwanted Fields

Elastic Stack Logstash
1

I want to ingest JSON PE file data that has 40+ fields w/nested fields. I only want the first few fields. Is there a way to either drop the unwanted fields or can I explicitly state which fields I want?

2

To filter top-level fields you can use a prune filter with whitelist_names.

3

Thanks Badger.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.