Hi, in my usecase Redis is used as a cache-server and stores big bunches of data. All that data is returned at redis.return_value field for each request what can lead to high resources consumption at ElasticSearch server.
I've checked source code for Redis protocol and looks like there's no way to disable that field:
Is there any way to disable that field? Or maybe it's a task for packetbeat's enhancement?
Right now you can not remove return_value from within packetbeat. With generic filtering (still in development, see open PR #1623) you will be able to remove any unwanted fields from your events.
Still makes sense to have an enhancement for limiting the return_value it's size.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.