Remove processoredit
Removes existing fields. If one field doesn’t exist, an exception will be thrown.
Table 29. Remove Options
Name | Required | Default | Description |
---|---|---|---|
|
yes |
- |
Fields to be removed. Supports template snippets. |
|
no |
|
If |
|
no |
- |
Conditionally execute this processor. |
|
no |
- |
Handle failures for this processor. See Handling Failures in Pipelines. |
|
no |
|
Ignore failures for this processor. See Handling Failures in Pipelines. |
|
no |
- |
An identifier for this processor. Useful for debugging and metrics. |
Here is an example to remove a single field:
{ "remove": { "field": "user_agent" } }
To remove multiple fields, you can use the following query:
{ "remove": { "field": ["user_agent", "url"] } }