Fluentd logs

[govindagopi]

i applied the filter condition in fluentd config yaml file in order to filter the particular field to be removed "data.involvedObject.labels.app" while fluentd logs are pushing to kibana. But the filter condition doesn't filtering it out.

<filter kubernetes.var.log.containers.**events**>
    @type parser
    <parse>
         @type json
          json_parser json
    </parse>
    replace_invalid_sequence true
    emit_invalid_record_to_error false
    key_name log
    inject_key_prefix data.
   @type record_tranformer
    remove_keys $.data.involvedObject.labels.app, data.involvedObject.labels.app
    reserve_data true
</filter>

[daipom]

You use yaml config file?
It looks like a normal config file.

I don't see the input data and the results.
If you have a simple reproducible case example, we might be able to advise you.

For example, you can test your config as follows.

<source>
  @type sample
  tag test
  # Arrange this depending on the input data you want to test.
  sample {"message": "test message"}
</source>

<filter test>
  # Write your filter config here
</filter>

<match test>
  # The results will be recorded in the console standard output or in the Fluentd log files.
  @type stdout
</match>