Removing Fields

This functionality allows you to remove fields which you do not need. The fields specified will be removed before events are parsed. Removed fields will not count as ingest towards your license. See Ingest Usage Management for more information on how ingest is measured.

  1. Go to your repository and click Parsers.

  2. On the Parsers page, click the required parser from the list. Under Code, the Parser script editor is displayed.

  3. Click Settings next to Code, then click Fields to remove in the side menu.

    On the Fields to remove page, enter the name of the field to remove and click Save.

    Remove Fields

    Figure 47. Remove Fields