Kibana 7.14.2 is no longer dropping events that are in the events filter drop list. This is creating massive amounts of excessive unneeded data. 30+mil events per hour. In kibana, Elastic Security, Event filters section. Add Event Filter. Enter a name. In Field drop down select event.code. Ente…

Kibana 7.14.2 Event Filter drop fails to drop events

andrewkroh (Andrew Kroh) October 4, 2021, 12:58pm 11

@PublicName What version of the System integration do you have installed. On the Settings page for the integration you can see the version (like shown in this post Elastic Endpoint - Filebeat - Java Error - #5 by andrewkroh).

Topic		Replies	Views
Elastic - Event Filtering Elastic Security	6	57	August 22, 2024
Elastic-Agent stand alone host only sends very few events Endpoint Security	2	501	July 15, 2021
Event Filter endpoint agent via Kibana (Fleet) with wildcards Beats docker , elastic-agent	3	569	December 7, 2021
Managing event filters outside the UI SIEM	4	328	August 24, 2022
Unable to drop specific event code data using Kibana pipeline Kibana	1	202	July 19, 2023