# Remove unused Kibana fields/filters

**URL:** <https://discuss.elastic.co/t/remove-unused-kibana-fields-filters/174135>\
**Category:** Logstash\
**Created:** [March 27, 2019, 1:52pm UTC](https://discuss.elastic.co/t/remove-unused-kibana-fields-filters/174135 "2019-03-27T13:52:01Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![markov](https://avatars.discourse-cdn.com/v4/letter/m/f1d935/32.png) [@markov](https://discuss.elastic.co/u/markov)\
**Post date:** [March 27, 2019, 1:52pm UTC](https://discuss.elastic.co/t/remove-unused-kibana-fields-filters/174135/1 "2019-03-27T13:52:01Z")

</div>

hi,  
can someone please tell me how i can keep just my grok filters and remove those 62 fields, i tried using mutate plugin but not working.

mutate {  
remove\_field =\> ["beat.name", "beat.version", "data", "host.architecture", "host.containerized", "host.id", "host.name", "host.codename", "host.family", "host.os.codename", "host.os.family", "host.os.name", "host.os.platform", "host.os.version", "input.type", "log.file.path", "message", "offset", "source", "tags", "prospector.type"]  
}

 ![Selection_005](https://us1.discourse-cdn.com/elastic/original/3X/e/d/edc7baaaad65880ce028f0323ccb44afd8e6a403.png)

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [March 27, 2019, 2:12pm UTC](https://discuss.elastic.co/t/remove-unused-kibana-fields-filters/174135/2 "2019-03-27T14:12:21Z")

</div>

Kibana uses field.subfield notation. In logstash it is [field][subfield], so you you need

```
remove_field => ["[beat][name]", "[beat][version]", ...
```

---

<div class="post-metadata">

**Author:** ![markov](https://avatars.discourse-cdn.com/v4/letter/m/f1d935/32.png) [@markov](https://discuss.elastic.co/u/markov)\
**Post date:** [March 28, 2019, 9:48am UTC](https://discuss.elastic.co/t/remove-unused-kibana-fields-filters/174135/3 "2019-03-28T09:48:23Z")

</div>

it's working thank you.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 25, 2019, 9:48am UTC](https://discuss.elastic.co/t/remove-unused-kibana-fields-filters/174135/4 "2019-04-25T09:48:32Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.