Removing Fields

Description​

The Eval Function can be used to add or remove fields. In this example we will remove the extracted fields while preserving _raw, _time,index,source, sourcetype.

Steps - Adding an Eval Function