{"type":"rich","version":"1.0","provider_name":"phorkie","provider_url":"https:\/\/p.cweiske.de\/","title":"logstash: drop event when tag is set","author_name":"Christian Weiske","cache_age":86400,"width":900,"height":900,"html":"<!-- embedding all files of https:\/\/p.cweiske.de\/59 -->\n<link rel=\"stylesheet\" href=\"https:\/\/p.cweiske.de\/css\/embed.css\"\/>\n<div class=\"phork\" id=\"59\">\n    <div class=\"phork-file\">\n <div class=\"phork-content\">\n  <style type=\"text\/css\">\/**\n * GeSHi (C) 2004 - 2007 Nigel McNie, 2007 - 2008 Benny Baumann\n * (http:\/\/qbnz.com\/highlighter\/ and http:\/\/geshi.org\/)\n *\/\n.ini .de1, .ini .de2 {font: normal normal 1em\/1.2em monospace; margin:0; padding:0; background:none; vertical-align:top;}\n.ini  {font-family:monospace;}\n.ini .imp {font-weight: bold; color: red;}\n.ini li, .ini .li1 {color: #DDD;}\n.ini .ln {width:1px;text-align:right;margin:0;padding:0 2px;vertical-align:top;}\n.ini .co0 {color: #666666; font-style: italic;}\n.ini .sy0 {color: #000066; font-weight:bold;}\n.ini .st0 {color: #933;}\n.ini .re0 {color: #000066; font-weight:bold;}\n.ini .re1 {color: #000099;}\n.ini .re2 {color: #660066;}\n.ini span.xtra { display:block; }\n<\/style><div class=\"code\"><table class=\"ini\"><tbody><tr class=\"li1\"><td class=\"ln\"><pre class=\"de1\">1\n2\n3\n4\n5\n6\n7\n8\n9\n10\n11\n<\/pre><\/td><td class=\"de1\"><pre class=\"de1\">filter <span class=\"br0\">&#123;<\/span>\n&#160; grok <span class=\"br0\">&#123;<\/span>\n&#160; &#160; <span class=\"re1\">match<\/span> <span class=\"sy0\">=<\/span><span class=\"re2\">&gt; <span class=\"br0\">&#91;<\/span> <\/span><span class=\"st0\">&quot;message&quot;<\/span>, <span class=\"st0\">&quot;something&quot;<\/span> <span class=\"br0\">&#93;<\/span>\n&#160; &#160; <span class=\"re1\">add_tag<\/span> <span class=\"sy0\">=<\/span><span class=\"re2\">&gt; <span class=\"br0\">&#91;<\/span> <\/span><span class=\"st0\">&quot;dropme&quot;<\/span> <span class=\"br0\">&#93;<\/span>\n&#160; &#160; <span class=\"re1\">tag_on_failure<\/span> <span class=\"sy0\">=<\/span><span class=\"re2\">&gt; <span class=\"br0\">&#91;<\/span><span class=\"br0\">&#93;<\/span><\/span>\n&#160; <span class=\"br0\">&#125;<\/span>\n&#160; if <span class=\"st0\">&quot;dropme&quot;<\/span> in <span class=\"re0\"><span class=\"br0\">&#91;<\/span>tags<span class=\"br0\">&#93;<\/span><\/span> <span class=\"br0\">&#123;<\/span>\n&#160; &#160; drop <span class=\"br0\">&#123;<\/span><span class=\"br0\">&#125;<\/span>\n&#160; <span class=\"br0\">&#125;<\/span>\n<span class=\"br0\">&#125;<\/span>\n&#160;<\/pre><\/td><\/tr><\/tbody><\/table><\/div>\n <\/div>\n <div class=\"phork-meta\">\n  <a href=\"https:\/\/p.cweiske.de\/59\/rev-raw\/4c17068639321c537e51114b17dc65ca431131fa\/drop-on-tag.conf\" style=\"float: right\">view raw source<\/a>\n  <a href=\"https:\/\/p.cweiske.de\/59#drop-on-tag.conf\">drop-on-tag.conf<\/a>\n <\/div>\n<\/div>\n<\/div>\n"}