Filter out lines with only a TAB

Elastic Stack Logstash
1

I have to ingest logfiles that contain lines with only a TAB in it. Is it possible to get rid of those lines using the drop() filter? Something like this:

filter {
...
if [message] =~ /^\s*$/ {
  drop { }
}
...
}

How does the drop {} actually work? Does it prevent messages from getting to the output {...} section of the Logstash config? Are they completely skipped after the drop {}?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.