My log looks something like this. "request": { "hostip": "10.7.37.74", "enduserip": "", } Obviously "enduserip": "" is not a valid IP address. I would like to delete the field in this case. This syntax isn't being considered valid by logstash. mutate{ remove_field => ["request"]["enduserip…

Working with child fields

ronwest99 (Ron West) May 18, 2016, 10:06pm 3

That worked, thanks!

Does the same syntax hold true for renaming a child field?

(my google foo on these topic's is highly lacking)

Topic		Replies	Views
How to use the second level of a fields Logstash	3	765	July 6, 2017
Mutate remove_field not working for JSON field Logstash	7	7064	July 6, 2017
Unable to remove field form nested object during mutate Logstash	4	13166	July 6, 2017
Problem deleting fields or renaming (from filebeat) Logstash	7	2130	July 6, 2017
Rename a field that has variable in name Logstash	2	1540	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Working with child fields

Related topics