Remove unused Kibana fields/filters

can someone please tell me how i can keep just my grok filters and remove those 62 fields, i tried using mutate plugin but not working.

mutate {
remove_field => [ "", "beat.version", "data", "host.architecture", "host.containerized", "", "", "host.codename", "", "host.os.codename", "", "", "host.os.platform", "host.os.version", "input.type", "log.file.path", "message", "offset", "source", "tags", "prospector.type" ]

Kibana uses field.subfield notation. In logstash it is [field][subfield], so you you need

remove_field => [ "[beat][name]", "[beat][version]", ...

it's working thank you.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.