Remove fields on windows event log

mutate {
remove_field => "beat"
}

if "beats_input_codec_plain_applied" in [tags] {
mutate {
remove_tag => ["beats_input_codec_plain_applied"]
}
}
}

doesn't work.