# Blocked in Pushing flush onto pipeline

**URL:** <https://discuss.elastic.co/t/blocked-in-pushing-flush-onto-pipeline/265911>\
**Category:** Elasticsearch\
**Created:** [March 2, 2021, 7:25am UTC](https://discuss.elastic.co/t/blocked-in-pushing-flush-onto-pipeline/265911 "2021-03-02T07:25:58Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![syrine\_chelly](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/syrine_chelly/32/84013_2.png) [@syrine\_chelly](https://discuss.elastic.co/u/syrine_chelly)\
**Post date:** [March 2, 2021, 7:25am UTC](https://discuss.elastic.co/t/blocked-in-pushing-flush-onto-pipeline/265911/1 "2021-03-02T07:25:58Z")

</div>

this my logstash.conf i want to drop all lines that begin with "(" into message but logstash is not showing the data in the console and is not sending it to logstash.

```auto
input {

  

    beats {

        

        port => 5044

    }

}

 

filter {

  split {

  field => "message"

  terminator => "\n" 

 }

if [message] =~ "^\("

 {

   drop { }

 }

   

}

output {

 #Sending properly parsed log events to elasticsearch

   elasticsearch {

    hosts => ["localhost:9200"]

    index => "indeed"

}

    stdout {

    codec => rubydebug

  }

   

}

```

this my filebeat.yml

```auto

filebeat.inputs:

# Each - is an input. Most options can be set at the input level, so

# you can use different inputs for various configurations.

# Below are the input specific configurations.

- type: log

  # Change to true to enable this input configuration.

  enabled: true

  # Paths that should be crawled and fetched. Glob based paths.

  paths:

    - C:\elasticstack\filebeat-7.10.2-windows-x86_64\filebeat-7.10.2-windows-x86_64\logs\test.log

    #- c:\programdata\elasticsearch\logs\*

  exclude_lines: ['^\(', '^[[:space:]]']

  include_lines: ['^(3[01]|0[1-9]|[12][0-9])(-?)(1[0-2]|0[1-9])(-?)([0-9]{4})[[:space:]]([0-9]{2}):([0-9]{2}):([0-9]{2})', 'ETAPE']

  multiline.pattern: 'CLOCTRL[[:space:]]\d'

  multiline.negate: true

  multiline.match: after

output.logstash:
  # The Logstash hosts
  hosts: ["localhost:5044"]

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 30, 2021, 7:26am UTC](https://discuss.elastic.co/t/blocked-in-pushing-flush-onto-pipeline/265911/2 "2021-03-30T07:26:33Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.