Trying to filter output from logstash

I am running logstash as part of an elk cluster on kubernetes.
I have set it up using helm on minikube with docker as vm-engine.

I am trying to add a filter to drop some of the events from logstash.
I have the following in
/usr/share/logstash/config/piplelines.yml:

  • pipeline.id: main
    path.config: "/usr/share/logstash/pipeline"

And in /usr/share/logstash/pipeline/filter_main.conf:

filter {

   drop { }
}

Which I would hope would drop everything.
The logstash container starts and runs without issues
From what I can see in kibana however it still get everything from logstash.

Is the above correct?
What steps could I take to debug this further?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.