I can't read or write Russian so I used Google Translate to convert your post to English and have also replied in English. If I misunderstood something, I apologize.
What happens if you comment out the drop_event processor from your configuration? Do you record all events? If so, can you post one of the recorded events here please so we can look at the fields in it?
Order of processors is significant. The kubernetes.* metadata fields are added by the add_kubernetes_metadata processor. So you probably want to swap the order of the processors in your configuration so add_kubernetes_metadata comes before drop_event.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.