Cribl 移除Fields

Cribl 对数据的加工，会对数据进行过滤，就会舍弃点数据:从而进入SIEM 平台的数据更理想化。

实验开始:

Now, we want to discard the original _raw field. (Because we're sending this data to plain text files in a filesystem, we no longer need this field. If we were sending the data to a destination that expects a _raw field – like popular SIEMs – we'd retain a _raw