Ls there a processor in filebeat same as a prune filter in logstash?

Elastic Stack Beats
1

Hello.

I want to get only specific fields in filebeat data. I know there is a prune filter in logstash config file but which one is same thing in filebeat config file processor?

I used include_fields processor, but it doesn't working. The result was that all the fields were shown up.

Thank you.

2

The processor is the include_fields to only include some fields or drop_fields to only drop some fields.

It is not clear why it doesn't work as you didn´t share your configuration or any other evidence of this.

Please share your filebeat.yml configuration and a sample of your message.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.