# Why filebeat create so many fields in the index of elasticsearch

**URL:** https://discuss.elastic.co/t/why-filebeat-create-so-many-fields-in-the-index-of-elasticsearch/177429
**Category:** Beats
**Tags:** filebeat
**Created:** [April 18, 2019, 9:38am UTC](https://discuss.elastic.co/t/why-filebeat-create-so-many-fields-in-the-index-of-elasticsearch/177429 "2019-04-18T09:38:57Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![99da02c8d5a5a0c0474d](https://avatars.discourse-cdn.com/v4/letter/9/3da27b/32.png) [@99da02c8d5a5a0c0474d](https://discuss.elastic.co/u/99da02c8d5a5a0c0474d)
#### Post date: [April 18, 2019, 9:38am UTC](https://discuss.elastic.co/t/why-filebeat-create-so-many-fields-in-the-index-of-elasticsearch/177429/1 "2019-04-18T09:38:57Z")

</div>

Hi,all.I'm a newbie for ELK. We use filebeat to collect nginx logs and output to elasticsearch with the default template,but when I checking the kibana's index on the dashboard,I saw the index contains 1148 fields,why filebeat create so many fields ?

here is some of my filebeat config:

filebeat.inputs:

- type: log  
enabled: true  
paths:
  - /data/log/nginx/access.log  
close\_inactive: 10m  
json.keys\_under\_root: true  
json.overwrite\_keys: true  
fields\_under\_root: true  
fields:  
app\_id: api-ngx

output.elasticsearch:  
hosts: ["10.0.1.6:9200","10.0.1.47:9200","10.0.1.48:9200"]  
indices:  
- index: "api-ngx-%{+yyyy.MM.dd}"  
when:  
contains:  
app\_id: api-ngx

---

<div class="post-metadata">

### Author: ![shrikantgulia](https://avatars.discourse-cdn.com/v4/letter/s/c68b51/32.png) [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)
#### Post date: [April 18, 2019, 12:16pm UTC](https://discuss.elastic.co/t/why-filebeat-create-so-many-fields-in-the-index-of-elasticsearch/177429/2 "2019-04-18T12:16:59Z")

</div>

its due to default property for certain type of logs.  
Would suggest you to parse different type with the help of logstash and remove all the fields which you don't want

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 16, 2019, 12:17pm UTC](https://discuss.elastic.co/t/why-filebeat-create-so-many-fields-in-the-index-of-elasticsearch/177429/3 "2019-05-16T12:17:08Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.