Hi, i want to use filebeat send message to elasticsearch directly. And i use processors as a filter to drop some useless fields. But when i check message from kibana only half messages drop fields. And i only run one filebeat. so is there have some solutions to let all messages drop fields. here is…

The processors only filter part of message

Augustus1995 (duyucong) December 3, 2017, 3:43pm 3

but what about offset and beat it is in the _source and why in some message i could drop it but the other not

Topic		Replies	Views
Filebeat didn't drop some of the fields Beats filebeat	2	4027	June 19, 2017
Unable to Drop desired fields using drop_fields processors in filebeat Beats filebeat	3	1371	March 26, 2021
Filebeats not dropping agent.* fields Beats filebeat	4	2549	November 20, 2019
Drop agent / ecs fields from filebeat (previous solves here only partially work) Beats filebeat	1	434	June 8, 2022
Filebeat drop_fields processors module does not work Beats filebeat	1	296	December 14, 2021