elasticsearch/docs/reference/enrich-processor/remove-processor.md
Colleen McGinnis 9bcd59596d
[docs] Prepare for docs-assembler (#125118)
* reorg files for docs-assembler and create toc.yml files

* fix build error, add redirects

* only toc

* move images
2025-03-20 12:09:12 -05:00

54 lines
1.9 KiB
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

---
navigation_title: "Remove"
mapped_pages:
- https://www.elastic.co/guide/en/elasticsearch/reference/current/remove-processor.html
---
# Remove processor [remove-processor]
Removes existing fields. If one field doesnt exist, an exception will be thrown.
$$$remove-options$$$
| Name | Required | Default | Description |
| --- | --- | --- | --- |
| `field` | yes | - | Fields to be removed. Supports [template snippets](docs-content://manage-data/ingest/transform-enrich/ingest-pipelines.md#template-snippets). |
| `ignore_missing` | no | `false` | If `true` and `field` does not exist or is `null`, the processor quietly exits without modifying the document |
| `keep` | no | - | Fields to be kept. When set, all fields other than those specified are removed. |
| `description` | no | - | Description of the processor. Useful for describing the purpose of the processor or its configuration. |
| `if` | no | - | Conditionally execute the processor. See [Conditionally run a processor](docs-content://manage-data/ingest/transform-enrich/ingest-pipelines.md#conditionally-run-processor). |
| `ignore_failure` | no | `false` | Ignore failures for the processor. See [Handling pipeline failures](docs-content://manage-data/ingest/transform-enrich/ingest-pipelines.md#handling-pipeline-failures). |
| `on_failure` | no | - | Handle failures for the processor. See [Handling pipeline failures](docs-content://manage-data/ingest/transform-enrich/ingest-pipelines.md#handling-pipeline-failures). |
| `tag` | no | - | Identifier for the processor. Useful for debugging and metrics. |
Here is an example to remove a single field:
```js
{
"remove": {
"field": "user_agent"
}
}
```
To remove multiple fields, you can use the following query:
```js
{
"remove": {
"field": ["user_agent", "url"]
}
}
```
You can also choose to remove all fields other than a specified list:
```js
{
"remove": {
"keep": ["url"]
}
}
```