# Prevent logs from appearing in Kibana
**URL:** https://discuss.elastic.co/t/prevent-logs-from-appearing-in-kibana/58937
**Category:** Logstash
**Created:** [August 25, 2016, 1:50pm UTC](https://discuss.elastic.co/t/prevent-logs-from-appearing-in-kibana/58937 "2016-08-25T13:50:40Z")
**Posts on this page:** 8
**Page:** 1
### Author:  [@scosta](https://discuss.elastic.co/u/scosta)
#### Post date: [August 25, 2016, 1:50pm UTC](https://discuss.elastic.co/t/prevent-logs-from-appearing-in-kibana/58937/1 "2016-08-25T13:50:41Z")
Good Morning.
I am a novice in ELK stack. I have problems in my logstash . I get many logs, but I need to keep a log with a specific message to appear on Kibana . How can I keep a log appear in Kibana for your message ?
For example , I need to remove the log that contains the following words : **pppoe , ppp**.
How do I do that?
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [August 25, 2016, 1:56pm UTC](https://discuss.elastic.co/t/prevent-logs-from-appearing-in-kibana/58937/2 "2016-08-25T13:56:31Z")
Do you want to
- store the PPP-related events in Elasticsearch but not display them in Kibana, or
- not store the events in Elasticsearch at all, in other words have Logstash just drop the events?
---
### Author:  [@scosta](https://discuss.elastic.co/u/scosta)
#### Post date: [August 25, 2016, 2:08pm UTC](https://discuss.elastic.co/t/prevent-logs-from-appearing-in-kibana/58937/3 "2016-08-25T14:08:04Z")
> [@magnusbaeck](#):
>
> Do you want to
>
> store the PPP-related events in Elasticsearch but not display them in Kibana, or
> not store the events in Elasticsearch at all, in other words have Logstash just drop the events?
PPP logs are not useful to me in logstash . I am using the elk stack to manage logs of my MikroTik routers, and I'm having a lot of trouble . From the mikrotik get multiple logs , already are all going to Kibana , but now I just need to keep the logs of type PPP , PPPoE are stored in the database . Except that all the logs comes as a message, such as:
message: pppoe,ppp,info : connected @version:1 @timestamp:August 25th 2016, 11:01:14.990 type:syslog host:177.124.72.4 \_id:AVbCATgFx-cjIMIocgLZ \_type:syslog \_index:logstash-2016.08.25 \_score:
This is the log I get the data with PPP , PPPoE ..
Now the example of another log (the log want to keep it ) 🙂
message:system,error,critical login failure for user ftp from 208.100.26.232 via ftp @version:1 @timestamp:August 25th 2016, 09:31:05.326 type:syslog host:177.124.72.12 \_id:AVbBrrASx-cjIMIocfYi \_type:syslog \_index:logstash-2016.08.25 \_score:
In short , I want to prevent the PPP , PPPoE logs, and other logs do not .
Sorry for the bad language , can not speak and read English.
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [August 25, 2016, 2:12pm UTC](https://discuss.elastic.co/t/prevent-logs-from-appearing-in-kibana/58937/4 "2016-08-25T14:12:27Z")
The drop filter can help:
```nohighlight
if "ppp" in [message] {
drop { }
}
```
---
### Author:  [@scosta](https://discuss.elastic.co/u/scosta)
#### Post date: [August 25, 2016, 2:24pm UTC](https://discuss.elastic.co/t/prevent-logs-from-appearing-in-kibana/58937/5 "2016-08-25T14:24:38Z")
Worked, thank you !
---
### Author:  [@Nejc\_Zupan](https://discuss.elastic.co/u/Nejc_Zupan)
#### Post date: [March 27, 2017, 3:48pm UTC](https://discuss.elastic.co/t/prevent-logs-from-appearing-in-kibana/58937/6 "2017-03-27T15:48:11Z")
I would like to store events in Elasticsearch and aggregate on them but they are not imprtant for debugging because it actually shows too many unnecessary logs.
This slows down the process because it spams you and it is harder to look for the exact log you look for.
How would I just kinda pushed these log lines in the backwards?
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [March 28, 2017, 5:27am UTC](https://discuss.elastic.co/t/prevent-logs-from-appearing-in-kibana/58937/7 "2017-03-28T05:27:18Z")
@Nejc_Zupan, please start a new thread for your unrelated question.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 4:27am UTC](https://discuss.elastic.co/t/prevent-logs-from-appearing-in-kibana/58937/8 "2017-07-06T04:27:31Z")