Removes existing fields. If one field doesn’t exist, an exception will be thrown.
Table 51. Remove Options
Name | Required | Default | Description |
---|---|---|---|
| yes | - | Fields to be removed. Supports template snippets. |
| no |
| If |
| no | - | Conditionally execute this processor. |
| no | - | Handle failures for this processor. See Handling Failures in Pipelines. |
| no |
| Ignore failures for this processor. See Handling Failures in Pipelines. |
| no | - | An identifier for this processor. Useful for debugging and metrics. |
Here is an example to remove a single field:
{ "remove": { "field": "user_agent" } }
To remove multiple fields, you can use the following query:
{ "remove": { "field": ["user_agent", "url"] } }