I am running logstash as part of an elk cluster on kubernetes.
I have set it up using helm on minikube with docker as vm-engine.
I am trying to add a filter to drop some of the events from logstash.
I have the following in
/usr/share/logstash/config/piplelines.yml:
- pipeline.id: main
path.config: "/usr/share/logstash/pipeline"
And in /usr/share/logstash/pipeline/filter_main.conf:
filter {
drop { }
}
Which I would hope would drop everything.
The logstash container starts and runs without issues
From what I can see in kibana however it still get everything from logstash.
Is the above correct?
What steps could I take to debug this further?