Remove specific fields from index pattern

Elastic Stack Elasticsearch
1

Hello,

I am using filebeat to parse my logs to Elasticsearch and after some testing with the dissect processor on ingest pipelines, I created too many random fields by mistake as I have noticed from my index patterns on kibana. How can I remove those fields from my index pattern without the need to delete the whole index? Perhaps deleting only the documents with those fields? Also, if I rotate this index and delete it, will this also remove any old index patterns that are not anymore present ?

2

TLDR - you can't.

You need a reindex to drop fields. Rotating the index may work, with a refresh of the pattern in Kibana.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.