Logstash, Input RabbitMQ


I currently have an RabbitMQ input and it works fine. I get the data in to elasticsearch.
What I have problem with is using a mutate to remove a field before its sent to elasticsearch output.

     	mutate {
     			remove_field => ["IN.LogEntries"]

The field IN.LogEntries I can find in elasticsearch but its not removed.
Any suggestions? Thanks :slight_smile:


I had to write [IN][LogEntries]

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.