create filter to remove entries

[pgh2011]

Hi,

Can someone give me an example on howto remove a logentry from the dashboard with a filter.
On the dashboard I can create a (temp) filter; but it doesn't show how to use this as a logstash filter.

[mcapra]

There's a distinct difference between dashboard filters and Logstash filters. They don't work in the same way.

Are you looking or a Logstash filter rule that will drop/delete certain traffic? That might look something like this:

Code: Select all

if [conditions] {
    drop{}
}

Be very careful using that though. Once the traffic is dropped, it is really really hard to get it back.