Hi, I need to remove a nasty field with keys and after reading this forum I've decided to use this: ruby { code => "event.get('[field_with_keys]').keys.each { |k| event['field_with_keys'].remove(k) }" } mutate { remove_field => [ "field_with_keys" ] } It works fine but now I'm getting this error …

system (system) Closed May 18, 2018, 1:06pm 8

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Can some one please tell me what this error means? Logstash	2	632	January 8, 2018
How to remove subfield using ruby Logstash	5	5726	January 2, 2017
Remove fields object event Logstash	3	502	August 23, 2018
Ruby Filter - Event.Remove Inconsistent Results Logstash	9	5888	August 7, 2018
Ruby filter raises error on event.delete Logstash	8	6795	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Remove keys and avoid "Direct event field references have been disabled" error message

Related topics