使用filebeat过滤掉部分字段

host,agent,ecs三个字段也是不让drop的

processors:
  - drop_fields:
      fields: ["log","input","host","agent","ecs"]
原文地址:https://www.cnblogs.com/sanduzxcvbnm/p/12522756.html