To save Splunk license I want to filter out some useless fields. I'we read all the log_exporter documentation and relevant posts here.
But I'm having trouble getting it to filter some fields, for examle the verbose filed "app_desc" just won't go away...
In targetConfiguration.xml I have these settings:
And in MySplunkFieldsMapping.xml
But that pesky add_desc fileld just wont go away.
What am I doing wrong?