2018-12-20 08:04:54 -05:00
|
|
|
[[remove-processor]]
|
2020-08-12 11:49:54 -04:00
|
|
|
=== Remove processor
|
|
|
|
++++
|
|
|
|
<titleabbrev>Remove</titleabbrev>
|
|
|
|
++++
|
|
|
|
|
2018-12-20 08:04:54 -05:00
|
|
|
Removes existing fields. If one field doesn't exist, an exception will be thrown.
|
|
|
|
|
|
|
|
[[remove-options]]
|
|
|
|
.Remove Options
|
|
|
|
[options="header"]
|
|
|
|
|======
|
|
|
|
| Name | Required | Default | Description
|
|
|
|
| `field` | yes | - | Fields to be removed. Supports <<accessing-template-fields,template snippets>>.
|
|
|
|
| `ignore_missing` | no | `false` | If `true` and `field` does not exist or is `null`, the processor quietly exits without modifying the document
|
|
|
|
include::common-options.asciidoc[]
|
|
|
|
|======
|
|
|
|
|
|
|
|
Here is an example to remove a single field:
|
|
|
|
|
|
|
|
[source,js]
|
|
|
|
--------------------------------------------------
|
|
|
|
{
|
|
|
|
"remove": {
|
|
|
|
"field": "user_agent"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
--------------------------------------------------
|
|
|
|
// NOTCONSOLE
|
|
|
|
|
|
|
|
To remove multiple fields, you can use the following query:
|
|
|
|
|
|
|
|
[source,js]
|
|
|
|
--------------------------------------------------
|
|
|
|
{
|
|
|
|
"remove": {
|
|
|
|
"field": ["user_agent", "url"]
|
|
|
|
}
|
|
|
|
}
|
|
|
|
--------------------------------------------------
|
|
|
|
// NOTCONSOLE
|