{ "message" => "The Windows Filtering Platform has permitted a connection......bla bla.....", "@version" => "1", "@timestamp" => "2017-05-24T03:38:00.775Z", "type" => "wineventlog", "task" => "Filtering Platform Connection", "log_name" => "Security", "event_data" => { "ProcessID" => "860", …

Remove fields on windows event log

tharu85 (Tharaka) May 24, 2017, 12:30pm 5

Both syntax that you are mentioned in previous post are not working. I have tested both syntax.

Topic		Replies	Views
Filter out beat.* Logstash	3	263	April 15, 2019
Mutate remove_field not working for JSON field Logstash	7	7085	July 6, 2017
Need help how to remove unwanted fields logstash Logstash	2	1055	May 11, 2022
Remove field on logstash Logstash	3	233	November 11, 2020
How to remove the fields Logstash	4	874	December 29, 2021

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Remove fields on windows event log

Related topics