I want to get only specific fields in filebeat data. I know there is a prune filter in logstash config file but which one is same thing in filebeat config file processor?
I used include_fields processor, but it doesn't working. The result was that all the fields were shown up.
The processor is the
include_fields to only include some fields or
drop_fields to only drop some fields.
It is not clear why it doesn't work as you didn´t share your configuration or any other evidence of this.
Please share your
filebeat.yml configuration and a sample of your message.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.