# Drop\_event proccessor

**URL:** <https://discuss.elastic.co/t/drop-event-proccessor/119050>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [February 8, 2018, 1:26pm UTC](https://discuss.elastic.co/t/drop-event-proccessor/119050 "2018-02-08T13:26:45Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Asaf\_David](https://avatars.discourse-cdn.com/v4/letter/a/8797f3/32.png) [@Asaf\_David](https://discuss.elastic.co/u/Asaf_David)\
**Post date:** [February 8, 2018, 1:26pm UTC](https://discuss.elastic.co/t/drop-event-proccessor/119050/1 "2018-02-08T13:26:45Z")

</div>

Hello All,  
i have an issue with filebeat.  
I tried to "drop\_event" with response code "200" and it's not working for me.

this is my filebeat configuration:

```
  processors:
    - drop_event:
        when:
          equals:
            http.response.code: 200 

```

thakns for your help!

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [February 8, 2018, 9:13pm UTC](https://discuss.elastic.co/t/drop-event-proccessor/119050/2 "2018-02-08T21:13:12Z")

</div>

So do you have a sample of the Filebeat event? Is the `code` value a number or a string? Your filter is comparing against a number. If the value is a string then add some quotes to the config (`"200"`).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 8, 2018, 9:13pm UTC](https://discuss.elastic.co/t/drop-event-proccessor/119050/3 "2018-03-08T21:13:35Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.