Is there any processor or any option where i can drop the event based some condition? similar to remove field processor
It is not forbidden to write your own processor that does it, though.
Here's how: https://www.elastic.co/blog/writing-your-own-ingest-processor-for-elasticsearch
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.