diff --git a/filters/privafy/privafy.conf b/filters/privafy/privafy.conf index 1c5337923..1fc0a4796 100644 --- a/filters/privafy/privafy.conf +++ b/filters/privafy/privafy.conf @@ -297,8 +297,7 @@ if [kv_field][severity]{ #......................................................................# #Finally, remove unnecessary fields mutate { - remove_field => ["@version","path","tags","type","syslog_version","kv_field","prvf_message","[logx][syslog]", - "not_defined","cef_or_leef_msg_all","cef_or_leef_msg","syslog_date_host","irrelevant","init_msg"] + remove_field => ["@version","path","tags","type","syslog_version","kv_field","message","[logx][syslog]","not_defined","cef_or_leef_msg_all","cef_or_leef_msg","syslog_date_host","irrelevant","init_msg"] } } # End CEF entrypoint