Logstash cheat sheet: Difference between revisions

Line 52: Line 52:
     # Remove host metadata                                                                                       
     # Remove host metadata                                                                                       
     mutate {
     mutate {
      remove_field => [ "[host][name]" ]
      remove_field => [ "[host][id]" ]
      remove_field => [ "[host][architecture]" ]
      remove_field => [ "[host][os][platform]" ]
      remove_field => [ "[host][os][version]" ]
      remove_field => [ "[host][os][family]" ]
      remove_field => [ "[host][ip]" ]
      remove_field => [ "[host][mac]" ]
      remove_field => [ "[host][os]" ]
       remove_field => [ "[host]" ]
       remove_field => [ "[host]" ]
     }
     }