Cisco asa module Drop events - help required

Elastic Stack Beats
,
1

Hi Team ,

We are currently using Cisco asa module for capturing firewall logs. Is there any option in Cisco asa module to capture only logs with specific severity (eg: log.level: informational) and drop all other events.

Beats and Elasticsearch version : 7.9.0

2

Hi,
I think you can do it using the Drop event processor and not operator in condition section.

3

Thanks Talebi, i ill check this option and update here