WinlogBeats template : Necessary to keep all fields?

Hello !

As I don't send Winlogbeats logs directly to Elasticsearch, I had to export and import the template.

I noticed that the file is huge ! It contains almost four thousand lines.
I noticed some fields related to Kubernetes, Docker, Jolokia. If I don't use these services, can I remove them with no incidence ?

Thanks for your feedback !

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.