|
mutate { remove_field => [ "[input][type]", "[prospector][type]", "[beat][name]", "[beat][hostname]", "source", "_score" ] }
|
|
mutate { remove_field => [ "[input][type]", "[prospector][type]", "[beat][name]", "[beat][hostname]", "source", "_score" ] }
|
|
match => [ "timestamp" , "yyyy-MM-dd HH:mm:ss.SSS" ]
|
|
match => [ "timestamp" , "yyyy-MM-dd HH:mm:ss.SSS" ]
|