Remove unused Kibana fields/filters

hi,
can someone please tell me how i can keep just my grok filters and remove those 62 fields, i tried using mutate plugin but not working.

mutate {
remove_field => [ "beat.name", "beat.version", "data", "host.architecture", "host.containerized", "host.id", "host.name", "host.codename", "host.family", "host.os.codename", "host.os.family", "host.os.name", "host.os.platform", "host.os.version", "input.type", "log.file.path", "message", "offset", "source", "tags", "prospector.type" ]
}

Kibana uses field.subfield notation. In logstash it is [field][subfield], so you you need

remove_field => [ "[beat][name]", "[beat][version]", ...

it's working thank you.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.