Hi All, Iam monitoring the windows events using Beats , but i could find lot of events generated every second and its kind of overloaded I want to drop this event id event_id : 5,516 Eventid is the field name and 5,516 is the value How to drop this documents completely wherever it have this…

Droping entire document

Raj_Kumar (Raj) December 11, 2017, 1:48pm 5

Thanks Paris for the rocket reply, i will get back to you after implementing it

Topic		Replies	Views
Drop entire log if condition is met Logstash	3	782	July 6, 2017
Logstash Filter to drop Beats events Logstash	2	279	September 19, 2019
Logstash and drop filter for Windows event Logstash	3	911	December 4, 2017
Drop Events By ID Beats winlogbeat	2	355	August 22, 2019
Logstash filter not working. Probably my fault :D Logstash	5	1008	November 28, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Droping entire document

Related topics