logstash reg remove_field

需求，需要刪除 logstash 以del 字段開頭的字段

 

    filter {
      prune {
        blacklist_values => [ "uripath", "/index.php",
                              "method", "(HEAD|OPTIONS)",
                              "status", "^[^2]" ]
      }
    }

參考

https://www.elastic.co/guide/en/logstash/current/plugins-filters-prune.html#plugins-filters-prune-blacklist_names

 

 

查看logstash 是否有相關 prune插件 或安裝插件 

參考

https://blog.csdn.net/laoyang360/article/details/65448962