Removing fields from Index

Elastic Stack Beats
5

Hey,

you have to change the following Block in your filebeat.yml if you don't want to get any Host Information at the log lines

processors:
  - add_docker_metadata:
  # - add_host_metadata: ~

( -add_host_metadata_~ is commented out)

If you only want to remove special fields you have to add the the following to the proccessors Block in your filebeat.yml

processors:
  - drop_fields:
      fields: ["host.name", "ecs.version", "agent.version", "agent.type", "agent.id",]

Check also this out -> How to remove certain fields from filebeat index