I've just configured filebeat to log to ES hosted by elastic. It is working fine but there are hundreds of unused fields i.e. apache, traefik.access., mysql..
It seems the default config points to a modules directory:
# Glob pattern for configuration loading
In that modules.d directory all files end with *.disabled.
Is filebeat supposed to be creating all these fields, and is there a way to turn that 'feature' off?