Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Field Reducer: Support to remove sub-fields in extra #2558

Open
sebix opened this issue Jan 27, 2025 · 0 comments
Open

Field Reducer: Support to remove sub-fields in extra #2558

sebix opened this issue Jan 27, 2025 · 0 comments
Labels
component: bots feature Indicates new feature requests or new features

Comments

@sebix
Copy link
Member

sebix commented Jan 27, 2025

(non-urgent) feature idea by an IntelMQ user:

If the event contains, for example

{
"extra.source.naics: 1,
"extra.source.sic: 2
}

setting

type: blacklist
keys: extra.source

does not delete the two fields.

@sebix sebix added component: bots feature Indicates new feature requests or new features labels Jan 27, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
component: bots feature Indicates new feature requests or new features
Projects
None yet
Development

No branches or pull requests

1 participant