Drop common but useless parameters from logstash
authorTom Hughes <tom@compton.nu>
Tue, 28 Jul 2015 09:17:32 +0000 (10:17 +0100)
committerTom Hughes <tom@compton.nu>
Tue, 28 Jul 2015 09:43:30 +0000 (10:43 +0100)
cookbooks/logstash/templates/default/logstash.conf.erb

index 7608e2b..0ddab7b 100644 (file)
@@ -17,9 +17,13 @@ filter {
   } else if [type] == "rails" {
     json {
       source => "message"
-    }
-    mutate {
-      remove_field => [ "message" ]
+      remove_field => [
+        "message",
+        "[parameters][authenticity_token]",
+        "[parameters][pass_crypt]",
+        "[parameters][pass_crypt_confirmation]",
+        "[parameters][utf8]"
+      ]
     }
   }
 }