Filebeat.yml drop event not working

I have add these in filebeat.yml, (version is 7.9)
I try every kinds of these keywords , but i still receive the process.name = "kibana" event.
why ?
Please kindly help
#========

Drop event

processors:
- drop_event:
when:
or:
- equals:
process.name: "filebeat"
- equals:
system.process.name: "kibana"
- equals:
system.process.name: "^kibana.*"
- equals:
process.name: kibana
- equals:
process.name: "kibana"
#===================

yml files are sensitive about tabs and spaces.
so could you format your code using ``` ? something like :

or:
  - equals:
      http.response.code: 304
  - equals:
      http.response.code: 404

thanks for your reply,
if i don't want to receive all kibana or filebeat messages, how should i do that ?
the filebeat and kibana just the tools, i think, i do not need their log.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.