hi,
can someone please tell me how i can keep just my grok filters and remove those 62 fields, i tried using mutate plugin but not working.
mutate {
remove_field => [ "beat.name", "beat.version", "data", "host.architecture", "host.containerized", "host.id", "host.name", "host.codename", "host.family", "host.os.codename", "host.os.family", "host.os.name", "host.os.platform", "host.os.version", "input.type", "log.file.path", "message", "offset", "source", "tags", "prospector.type" ]
}