elk stack - How to remove selected text from Logstash "message" field -

below sample "message" field getting through logstash.

181 <14>1 2016-07-21t19:09:43.538674+00:00 loggregator 6eca5b5d-65cb-4190-ab35-64ec79ad1c1f [app/1] - -    securityfilterautoconfiguration#securityfilterchainregistration did not match 

in "message" field , don't want loggregator 6eca5b5d-65cb-4190-ab35-64ec79ad1c1f , because decreases readability of message.

how can remove this part message field?

i saw removefield filter configuration, seems removefield remove entire "message" field.

any help/route docs appreciated.

mutate filter gsub way, try with:

  mutate {     gsub => [       "message", "loggregator [a-za-z0-9._-]+", ""     ]   }