Null Field Name


I am getting an error message "field name cannot be an empty string" for a number of documents coming into logstash. I am attempting to remove the null fields with a mutate filter:

mutate { remove_field => [ "[]" ] }

But I am getting an error:

{:exception=>"Invalid FieldReference: []"}

Is there a specific way to refer to a null field name so I can remove it (or rename it) or is there another method to resolve?

1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.