Skip to content
Legacy docs for Tenzir v5.x. For the latest Tenzir v6 series, visit docs.tenzir.com. Migrating from v5? Read the Tenzir v6 migration guide.

Removes fields from the event.

drop field...

Removes the given fields from the events. Issues a warning if a field is not present.

from {
src: 192.168.0.4,
dst: 192.168.0.31,
role: "admin",
info: {
id: "cR32kdMD9",
msg: 8411,
},
}
drop role, info.id
{
src: 192.168.0.4,
dst: 192.168.0.31,
info: {
msg: 8411,
},
}

Last updated: