I set a UDP listener in logstash pipe to get packet from a specific port. The packets are in JSON format.
When I perform formatting on received packets, Logstash adds additional field (e.g. @timestamp, @version, tags, ...). I remove them using mutate plugin using remove_field. It removes all addition fields, except tags.
I tested almost everything. I event installed a fresh new version of logstash. But I am still having issue with it.
Would you please help me regarding it?