remove_fields transform

Accepts `log` and `metric` events and allows you to remove one or more event fields.

The remove_fields transform accepts log and metric events and allows you to remove one or more event fields.

Config File

vector.toml (example)
vector.toml (schema)
vector.toml (specification)
[transforms.my_transform_id]
type = "remove_fields" # must be: "remove_fields"
inputs = ["my-source-id"]
fields = ["field1", "field2"]

Options

Key

Type

Description

REQUIRED

type

string

The component type required must be: "remove_fields"

inputs

[string]

A list of upstream source or transform IDs. See Config Composition for more info. required example: ["my-source-id"]

fields

[string]

The field names to drop. required example: ["field1", "field2"]

How It Works

Environment Variables

Environment variables are supported through all of Vector's configuration. Simply add ${MY_ENV_VAR} in your Vector configuration file and the variable will be replaced before being evaluated.

You can learn more in the Environment Variables section.

Troubleshooting

The best place to start with troubleshooting is to check the Vector logs. This is typically located at /var/log/vector.log, then proceed to follow the Troubleshooting Guide.

If the Troubleshooting Guide does not resolve your issue, please:

  1. If encountered a bug, please file a bug report.

  2. If encountered a missing feature, please file a feature request.

  3. If you need help, join our chat/forum community. You can post a question and search previous questions.

Alternatives

Finally, consider the following alternatives:

Resources