Hi, i want to use filebeat send message to elasticsearch directly. And i use processors as a filter to drop some useless fields. But when i check message from kibana only half messages drop fields. And i only run one filebeat. so is there have some solutions to let all messages drop fields. here is…

The processors only filter part of message

Christian_Dahlqvist (Christian Dahlqvist) December 3, 2017, 3:40pm 2

_score and _version are internal Elasticsearch fields, so do not exist in Filebeat and can not be dropped.

Topic		Replies	Views
Filebeat didn't drop some of the fields Beats filebeat	2	4027	June 19, 2017
Unable to Drop desired fields using drop_fields processors in filebeat Beats filebeat	3	1371	March 26, 2021
Filebeats not dropping agent.* fields Beats filebeat	4	2549	November 20, 2019
Drop agent / ecs fields from filebeat (previous solves here only partially work) Beats filebeat	1	434	June 8, 2022
Filebeat drop_fields processors module does not work Beats filebeat	1	296	December 14, 2021