NOTE: You are looking at documentation for an older release. For the latest information, see the current release documentation.
Remove Processor
editRemove Processor
editRemoves existing fields. If one field doesn’t exist, an exception will be thrown.
Table 49. Remove Options
Name | Required | Default | Description |
---|---|---|---|
|
yes |
- |
Fields to be removed. Supports template snippets. |
|
no |
|
If |
|
no |
- |
Conditionally execute this processor. |
|
no |
- |
Handle failures for this processor. See Handling Failures in Pipelines. |
|
no |
|
Ignore failures for this processor. See Handling Failures in Pipelines. |
|
no |
- |
An identifier for this processor. Useful for debugging and metrics. |
Here is an example to remove a single field:
{ "remove": { "field": "user_agent" } }
To remove multiple fields, you can use the following query:
{ "remove": { "field": ["user_agent", "url"] } }