RUBY Logstash Remove field without suffix

I need to write a filter in the logstash which deletes all fields except Hostname and Username and all fields with suffix and _key, for example platform_txt

Have a look at the prune filter.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.