I am trying to drop some fields on the indices ingested by the filebeat Nginx module.
I followed the instructions on the thread How to use processors in filebeat HAproxy's module? - #3 by aventrax, but the fields are not being dropped when I restart filebeat with "filebeat -e".
My config looks like this:
- module: nginx # Access logs access: enabled: true # Set custom paths for the log files. If left empty, # Filebeat will choose the paths depending on your OS. #var.paths: # Input configuration (advanced). Any input configuration option # can be added under this section. input: processors: - drop_fields: fields: ["agent", "user_agent"]
Am I missing anything? Any help is appreciated!