# How to limit logs ingestion into Elastic?

**URL:** <https://discuss.elastic.co/t/how-to-limit-logs-ingestion-into-elastic/335527>\
**Category:** Elasticsearch\
**Created:** [June 8, 2023, 11:55am UTC](https://discuss.elastic.co/t/how-to-limit-logs-ingestion-into-elastic/335527 "2023-06-08T11:55:04Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![irshadalam](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/irshadalam/32/124145_2.png) [@irshadalam](https://discuss.elastic.co/u/irshadalam)\
**Post date:** [June 8, 2023, 11:55am UTC](https://discuss.elastic.co/t/how-to-limit-logs-ingestion-into-elastic/335527/1 "2023-06-08T11:55:04Z")

</div>

How to limit logs ingestion into Elastic ?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 8, 2023, 10:31pm UTC](https://discuss.elastic.co/t/how-to-limit-logs-ingestion-into-elastic/335527/2 "2023-06-08T22:31:22Z")

</div>

Welcome to our community! 😃

It'd help if you added more information on what you are seeking to do here. Limit them in what manner?

---

<div class="post-metadata">

**Author:** ![irshadalam](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/irshadalam/32/124145_2.png) [@irshadalam](https://discuss.elastic.co/u/irshadalam)\
**Post date:** [June 9, 2023, 4:41am UTC](https://discuss.elastic.co/t/how-to-limit-logs-ingestion-into-elastic/335527/3 "2023-06-09T04:41:19Z")

</div>

Thanks @warkolm ,We are collecting Azure NSG flow logs and want to filter only certain types of logs like only login activity and specific port .I need help how to filter in my EKB cluster to ingest only required logs and filter others ,so that our logs ingestion & Bandwidth save.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [June 9, 2023, 5:34am UTC](https://discuss.elastic.co/t/how-to-limit-logs-ingestion-into-elastic/335527/4 "2023-06-09T05:34:39Z")

</div>

You will need to filter out these logs prior to indexing them into Elasticsearch, e.g. in Logstash using a drop processor together with conditionals. The answer therefore depend on how your data is getting into Elasticsearch.

---

<div class="post-metadata">

**Author:** ![irshadalam](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/irshadalam/32/124145_2.png) [@irshadalam](https://discuss.elastic.co/u/irshadalam)\
**Post date:** [June 9, 2023, 9:40am UTC](https://discuss.elastic.co/t/how-to-limit-logs-ingestion-into-elastic/335527/5 "2023-06-09T09:40:55Z")

</div>

Thanks for help.I will try it

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 7, 2023, 9:41am UTC](https://discuss.elastic.co/t/how-to-limit-logs-ingestion-into-elastic/335527/6 "2023-07-07T09:41:36Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.