logstash: drop event when tag is set

raw

drop-on-tag.conf

1
2
3
4
5
6
7
8
9
10
11
filter {
  grok {
    match => [ "message", "something" ]
    add_tag => [ "dropme" ]
    tag_on_failure => []
  }
  if "dropme" in [tags] {
    drop {}
  }
}
 
Christian Weiske Christian Weiske
owner

History