# Trying to filter output from logstash

**URL:** <https://discuss.elastic.co/t/trying-to-filter-output-from-logstash/222070>\
**Category:** Logstash\
**Tags:** docker\
**Created:** [March 4, 2020, 12:11pm UTC](https://discuss.elastic.co/t/trying-to-filter-output-from-logstash/222070 "2020-03-04T12:11:09Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![tobbes](https://avatars.discourse-cdn.com/v4/letter/t/f19dbf/32.png) [@tobbes](https://discuss.elastic.co/u/tobbes)\
**Post date:** [March 4, 2020, 12:11pm UTC](https://discuss.elastic.co/t/trying-to-filter-output-from-logstash/222070/1 "2020-03-04T12:11:09Z")

</div>

I am running logstash as part of an elk cluster on kubernetes.  
I have set it up using helm on minikube with docker as vm-engine.

I am trying to add a filter to drop some of the events from logstash.  
I have the following in  
/usr/share/logstash/config/piplelines.yml:

- pipeline.id: main  
path.config: "/usr/share/logstash/pipeline"

And in /usr/share/logstash/pipeline/filter\_main.conf:

filter {

```
   drop { }
}

```

Which I would hope would drop everything.  
The logstash container starts and runs without issues  
From what I can see in kibana however it still get everything from logstash.

Is the above correct?  
What steps could I take to debug this further?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 1, 2020, 12:11pm UTC](https://discuss.elastic.co/t/trying-to-filter-output-from-logstash/222070/2 "2020-04-01T12:11:15Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.