Skip to content

Instantly share code, notes, and snippets.

@Tombar
Created December 9, 2013 22:26
Show Gist options
  • Save Tombar/7882116 to your computer and use it in GitHub Desktop.
Save Tombar/7882116 to your computer and use it in GitHub Desktop.
logstash remove fields with mutate filter
mutate {
remove_field => ['geoip.areacode', 'geoip.continent_code', 'geoip.country_code3', 'geoip.country_name', 'geoip.dma_code',
'geoip.latitude', 'geoip.longitude', 'geoip.postal_code', 'geoip.real_region_name',
'ua.minor', 'ua.major', 'ua.os_minor', 'ua.os_major', 'ua.patch', 'ua.os_name' ]
}
@Tombar
Copy link
Author

Tombar commented Jun 14, 2022

glad this helped you :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment