# Remove Processor return an illegal\_argument\_exception error

**URL:** https://discuss.elastic.co/t/remove-processor-return-an-illegal-argument-exception-error/329470
**Category:** Elasticsearch
**Created:** [April 6, 2023, 2:47am UTC](https://discuss.elastic.co/t/remove-processor-return-an-illegal-argument-exception-error/329470 "2023-04-06T02:47:37Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![Anh\_Nguyen](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anh_nguyen/32/98119_2.png) [@Anh\_Nguyen](https://discuss.elastic.co/u/Anh_Nguyen)
#### Post date: [April 6, 2023, 2:47am UTC](https://discuss.elastic.co/t/remove-processor-return-an-illegal-argument-exception-error/329470/1 "2023-04-06T02:47:37Z")

</div>

I want to remove some duplicated fileds' value by using remove processor in ingest pipeline. I using Elastic Agent to collect log. The problem is I always got an error in output is: "field [field\_name] not present as part of path [field\_name]".  
I use CEF integration, it has some CEF standard fields and some event.\* fields (and more) with the same value. For example, "cef.severity : 3" and "event.severity : 3", "cef.device.vendor: Trend Micro" and "observer.vendor : Trend Micro", etc.

Thankyou for reading. Please help.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 4, 2023, 2:48am UTC](https://discuss.elastic.co/t/remove-processor-return-an-illegal-argument-exception-error/329470/2 "2023-05-04T02:48:20Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.