Logstash, Input RabbitMQ

Elastic Stack Logstash
1

Hi,

I currently have an RabbitMQ input and it works fine. I get the data in to elasticsearch.
What I have problem with is using a mutate to remove a field before its sent to elasticsearch output.

     	mutate {
     			remove_field => ["IN.LogEntries"]
     			}
     		}

The field IN.LogEntries I can find in elasticsearch but its not removed.
Any suggestions? Thanks :slight_smile:

2

Solved.

I had to write [IN][LogEntries]

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.