Is there any processor or any option where i can drop the event based some condition? similar to remove field processor
Nope. See
It is not forbidden to write your own processor that does it, though. 
Here's how: https://www.elastic.co/blog/writing-your-own-ingest-processor-for-elasticsearch
1 Like
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.