# Specifying and defining fields **URL:** \ **Category:** Beats\ **Created:** [April 13, 2017, 5:25pm UTC](https://discuss.elastic.co/t/specifying-and-defining-fields/82334 "2017-04-13T17:25:44Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![rswestmoreland](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rswestmoreland/32/17476_2.png) [@rswestmoreland](https://discuss.elastic.co/u/rswestmoreland)\ **Post date:** [April 13, 2017, 5:25pm UTC](https://discuss.elastic.co/t/specifying-and-defining-fields/82334/1 "2017-04-13T17:25:44Z")
Looking through the documentation and I can see how to add static fields, and set those fields into the root level of the json, but I'm having trouble figuring out if there is a way for me to specify which fields I want to keep, and if I can rename each of these fields before the logs are shipped. I also want all of these to stay in root level. Is this possible? Can I get an example? ---
**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\ **Post date:** [April 13, 2017, 5:50pm UTC](https://discuss.elastic.co/t/specifying-and-defining-fields/82334/2 "2017-04-13T17:50:03Z")
You can use [processors](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-processors.html) to remove fields from events. There currently is no processor to rename a field. You need Logstash or Ingest Node to do that. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [May 4, 2017, 5:25pm UTC](https://discuss.elastic.co/t/specifying-and-defining-fields/82334/3 "2017-05-04T17:25:43Z")
This topic was automatically closed after 21 days. New replies are no longer allowed.