I have a event that consists of various fields, one of which is called "raw_message". This field's contents is a raw string eg.
raw_message: "Raw user details:: [location:london name:kris wu id:L3j5k category:vip]"
raw_message: "Raw user details:: [location:london category:vip]"
I would like to remove name and id from this field. I understand remove_field doesnt work for the mutate or filter plugin since that function removes the entire field which is not what I'm looking for.