Skip to content

Commit c64e417

Browse files
author
Lucas Bremgartner
committed
Remove field rawSectionZ
Field rawSectionZ is always empty, because the section delimiter signals the end of the event. There is no data in this part. No need to keep an empty field.
1 parent 00cfab4 commit c64e417

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

2500_filter_cleanup.conf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ filter {
55
# Get rid of fields that we don't need anymore
66
#~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
77
mutate {
8-
remove_field => [ "message", "raw_responseHeaders", "raw_requestHeaders"]
8+
remove_field => [ "message", "raw_responseHeaders", "raw_requestHeaders", "rawSectionZ"]
99
}
1010
}
1111
}

0 commit comments

Comments
 (0)