filter{
    mutate{
        remove_field => ["ecs","cloud","host","@version","input"]
        remove_field => "[agent][version]"
        remove_field => "[agent][ephemeral_id]"
        remove_field => "[agent][id]"
        remove_field => "[agent][type]"
    }
    mutate {
        add_field => { "log_field" => "%{log}" }
    }
    grok {
        match => { "log_field" => "%{GREEDYDATA}/usr/local/app/tars/tarsnode/data/Vipthink.%{GREEDYDATA:servername}/bin%{GREEDYDATA}" }
        remove_field  => "log_field"
    }
}


nohup /data/server/logstash-7.3.0/bin/logstash -f /data/server/logstash-7.3.0/config/input-k8s.conf --config.reload.automatic &