Filtering Winlogbeat on Event ID

Thanks for the quick responses!

This will only prevent the events from being captured by logstash and not prevent winlogbeat from sending them to the logstash server. I really am looking for a way to prevent the traffic flow to the logstash server.

How long until the drop_event feature will be added? Can I beta test the release?

Thanks!