This functionality is experimental and may be changed or removed completely in a future release. Elastic will take a best effort approach to fix any issues, but experimental features are not subject to the support SLA of official GA features.
include_fields processor specifies which fields to export if a certain
condition is fulfilled. The condition is optional. If it’s missing, the
specified fields are always exported. The
type fields are
always exported, even if they are not defined in the
processors: - include_fields: when: condition fields: ["field1", "field2", ...]
See Conditions for a list of supported conditions.
You can specify multiple
include_fields processors under the
If you define an empty list of fields under
include_fields, then only
the required fields,
type, are exported.
Intro to Kibana
ELK for Logs & Metrics