rich1.0phorkiehttps://p.cweiske.de/logstash: drop event when tag is setChristian Weiske86400900900<!-- embedding all files of https://p.cweiske.de/59 -->
<link rel="stylesheet" href="https://p.cweiske.de/css/embed.css"/>
<div class="phork" id="59">
<div class="phork-file">
<div class="phork-content">
<style type="text/css">/**
* GeSHi (C) 2004 - 2007 Nigel McNie, 2007 - 2008 Benny Baumann
* (http://qbnz.com/highlighter/ and http://geshi.org/)
*/
.ini .de1, .ini .de2 {font: normal normal 1em/1.2em monospace; margin:0; padding:0; background:none; vertical-align:top;}
.ini {font-family:monospace;}
.ini .imp {font-weight: bold; color: red;}
.ini li, .ini .li1 {color: #DDD;}
.ini .ln {width:1px;text-align:right;margin:0;padding:0 2px;vertical-align:top;}
.ini .co0 {color: #666666; font-style: italic;}
.ini .sy0 {color: #000066; font-weight:bold;}
.ini .st0 {color: #933;}
.ini .re0 {color: #000066; font-weight:bold;}
.ini .re1 {color: #000099;}
.ini .re2 {color: #660066;}
.ini span.xtra { display:block; }
</style><div class="code"><table class="ini"><tbody><tr class="li1"><td class="ln"><pre class="de1">1
2
3
4
5
6
7
8
9
10
11
</pre></td><td class="de1"><pre class="de1">filter <span class="br0">{</span>
  grok <span class="br0">{</span>
    <span class="re1">match</span> <span class="sy0">=</span><span class="re2">> <span class="br0">[</span> </span><span class="st0">"message"</span>, <span class="st0">"something"</span> <span class="br0">]</span>
    <span class="re1">add_tag</span> <span class="sy0">=</span><span class="re2">> <span class="br0">[</span> </span><span class="st0">"dropme"</span> <span class="br0">]</span>
    <span class="re1">tag_on_failure</span> <span class="sy0">=</span><span class="re2">> <span class="br0">[</span><span class="br0">]</span></span>
  <span class="br0">}</span>
  if <span class="st0">"dropme"</span> in <span class="re0"><span class="br0">[</span>tags<span class="br0">]</span></span> <span class="br0">{</span>
    drop <span class="br0">{</span><span class="br0">}</span>
  <span class="br0">}</span>
<span class="br0">}</span>
 </pre></td></tr></tbody></table></div>
</div>
<div class="phork-meta">
<a href="https://p.cweiske.de/59/rev-raw/4c17068639321c537e51114b17dc65ca431131fa/drop-on-tag.conf" style="float: right">view raw source</a>
<a href="https://p.cweiske.de/59#drop-on-tag.conf">drop-on-tag.conf</a>
</div>
</div>
</div>