logstash reg remove_field

需求，需要删除 logstash 以del 字段开头的字段

 

    filter {
      prune {
        blacklist_values => [ "uripath", "/index.php",
                              "method", "(HEAD|OPTIONS)",
                              "status", "^[^2]" ]
      }
    }

参考

https://www.elastic.co/guide/en/logstash/current/plugins-filters-prune.html#plugins-filters-prune-blacklist_names

 

 

查看logstash 是否有相关 prune插件 或安装插件 

参考

https://blog.csdn.net/laoyang360/article/details/65448962