# Drop messages to log

**URL:** <https://discuss.elastic.co/t/drop-messages-to-log/223378>\
**Category:** Elasticsearch\
**Created:** [March 12, 2020, 4:21pm UTC](https://discuss.elastic.co/t/drop-messages-to-log/223378 "2020-03-12T16:21:17Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![David\_Oceans](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/david_oceans/32/51452_2.png) [@David\_Oceans](https://discuss.elastic.co/u/David_Oceans)\
**Post date:** [March 12, 2020, 4:21pm UTC](https://discuss.elastic.co/t/drop-messages-to-log/223378/1 "2020-03-12T16:21:17Z")

</div>

Hi!

I have a lot of documents saved in each minute because of LB of Google, the messages are like that:  
10.xx.xx.xx - - [12/Mar/2020:16:08:20 +0000] "GET / HTTP/1.1" 200 7487 "-" "GoogleHC/1.0" "-"

After investigate this kind of messages are normal, so I have to find some way no avoid this message in my elasticsearch

I'm using filebeat to send logs inside my kubernetes cluster to elastic.

Is there any way to not log this kind of message?

Thank you very much!

---

<div class="post-metadata">

**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Post date:** [March 13, 2020, 4:40pm UTC](https://discuss.elastic.co/t/drop-messages-to-log/223378/2 "2020-03-13T16:40:10Z")

</div>

You could use the [drop\_event processor](https://www.elastic.co/guide/en/beats/functionbeat/7.6/drop-event.html) of filebeat, if a the user agent is set to a certain agent. See [https://www.elastic.co/guide/en/beats/functionbeat/7.6/defining-processors.html#conditions](https://www.elastic.co/guide/en/beats/functionbeat/7.6/defining-processors.html#conditions)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 10, 2020, 4:40pm UTC](https://discuss.elastic.co/t/drop-messages-to-log/223378/3 "2020-04-10T16:40:13Z")

</div>

Closed on April 10, 2020, 4:40pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.