使用filebeat过滤掉部分字段 host,agent,ecs三个字段也是不让drop的 processors: - drop_fields: fields: ["log","input","host","agent","ecs"]