# Elasticsearch ingest pipeline drop processor no worky :(

**URL:** <https://discuss.elastic.co/t/elasticsearch-ingest-pipeline-drop-processor-no-worky/198904>\
**Category:** Elasticsearch\
**Created:** [September 10, 2019, 1:07pm UTC](https://discuss.elastic.co/t/elasticsearch-ingest-pipeline-drop-processor-no-worky/198904 "2019-09-10T13:07:18Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![nilsenj](https://avatars.discourse-cdn.com/v4/letter/n/d2c977/32.png) [@nilsenj](https://discuss.elastic.co/u/nilsenj)\
**Post date:** [September 10, 2019, 1:07pm UTC](https://discuss.elastic.co/t/elasticsearch-ingest-pipeline-drop-processor-no-worky/198904/1 "2019-09-10T13:07:19Z")

</div>

Hello fellow log ingestors,

I have an ingest pipeline to ingest logs however I want to drop the document if it contains a certain string in the message field. I am trying to use the drop processor for this but the document does not seem to get dropped.

I have the following drop processor:

```
"drop": {
               "if" : "ctx.message == '(^commit{dir=.+)'"
            },

```

I am expecting this to drop any document with a matching expression in the message field but this is not happening. Am I misunderstanding how this processor works?

Thanks

---

<div class="post-metadata">

**Author:** ![nilsenj](https://avatars.discourse-cdn.com/v4/letter/n/d2c977/32.png) [@nilsenj](https://discuss.elastic.co/u/nilsenj)\
**Post date:** [September 11, 2019, 12:55pm UTC](https://discuss.elastic.co/t/elasticsearch-ingest-pipeline-drop-processor-no-worky/198904/2 "2019-09-11T12:55:12Z")

</div>

Ok, so after much googling I found this [https://github.com/elastic/elasticsearch/issues/36150](https://github.com/elastic/elasticsearch/issues/36150). 🤦‍♀️

This is a known bug which is fixed in 7.4

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 9, 2019, 12:55pm UTC](https://discuss.elastic.co/t/elasticsearch-ingest-pipeline-drop-processor-no-worky/198904/3 "2019-10-09T12:55:43Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.