How to limit logs ingestion into Elastic?

Elastic Stack Elasticsearch
1

How to limit logs ingestion into Elastic ?

2

Welcome to our community! :smiley:

It'd help if you added more information on what you are seeking to do here. Limit them in what manner?

3

Thanks @warkolm ,We are collecting Azure NSG flow logs and want to filter only certain types of logs like only login activity and specific port .I need help how to filter in my EKB cluster to ingest only required logs and filter others ,so that our logs ingestion & Bandwidth save.

4

You will need to filter out these logs prior to indexing them into Elasticsearch, e.g. in Logstash using a drop processor together with conditionals. The answer therefore depend on how your data is getting into Elasticsearch.

1 Like
5

Thanks for help.I will try it

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.