Updated logstash script to drop the original event field as it contained the entire unsplit response from the trimet api (#131853)

This commit is contained in:
James Garside 2022-05-10 15:48:03 +01:00 committed by GitHub
parent 626b4ae4ce
commit 9f992c2b12
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -112,7 +112,7 @@ filter {
"type" => "%{[resultSet][vehicle][type]}"
"vehicle_id" => "%{[resultSet][vehicle][vehicleID]}"
}
remove_field => [ "resultSet", "@version", "@timestamp" ]
remove_field => [ "resultSet", "@version", "@timestamp", "[event][original]" ]
}
mutate {