https://community.splunk.com/t5/Splunk-Enterprise-Security/Is-it-possible-to-filter-data-coming-through-Elasticsearch/m-p/483660#M7871 <P>Hi All,</P> <P>I have enabled the Modular Input for Elasticsearch(ES) and I am able to get in the data.<BR /> My sample data is metric data that was collected using Metricbeats in ES.</P> <P>Looking at the data ingested in Splunk, there are a lot of fields that are coming through.<BR /> Is it possible to selectively index the data into Splunk without changing the configuration or data indices on ES?</P> Mon, 27 Apr 2020 19:51:51 GMT prachisaxena 2020-04-27T19:51:51Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Is-it-possible-to-filter-data-coming-through-Elasticsearch/m-p/483660#M7871 <P>Hi All,</P> <P>I have enabled the Modular Input for Elasticsearch(ES) and I am able to get in the data.<BR /> My sample data is metric data that was collected using Metricbeats in ES.</P> <P>Looking at the data ingested in Splunk, there are a lot of fields that are coming through.<BR /> Is it possible to selectively index the data into Splunk without changing the configuration or data indices on ES?</P> Mon, 27 Apr 2020 19:51:51 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Is-it-possible-to-filter-data-coming-through-Elasticsearch/m-p/483660#M7871 prachisaxena 2020-04-27T19:51:51Z