Module fields coming from filebeat

Elastic Stack Beats
1

I've just configured filebeat to log to ES hosted by elastic. It is working fine but there are hundreds of unused fields i.e. apache, traefik.access., mysql..
It seems the default config points to a modules directory:
filebeat.config.modules:
# Glob pattern for configuration loading
path: ${path.config}/modules.d/*.yml

In that modules.d directory all files end with *.disabled.

Is filebeat supposed to be creating all these fields, and is there a way to turn that 'feature' off?

thanks

2

This is something we're still in the design phase of improving. One potential path is the solution proposed here: https://github.com/elastic/beats/pull/7972

3

Thanks for the link. It sounds like having this template with several hundred unused fields generally has a minimal impact on performance?

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.