Page 1 of 1

create filter to remove entries

Posted: Tue Feb 28, 2017 7:42 am
by pgh2011
Hi,

Can someone give me an example on howto remove a logentry from the dashboard with a filter.
On the dashboard I can create a (temp) filter; but it doesn't show how to use this as a logstash filter.

Re: create filter to remove entries

Posted: Tue Feb 28, 2017 11:09 am
by mcapra
There's a distinct difference between dashboard filters and Logstash filters. They don't work in the same way.

Are you looking or a Logstash filter rule that will drop/delete certain traffic? That might look something like this:

Code: Select all

if [conditions] {
    drop{}
}
Be very careful using that though. Once the traffic is dropped, it is really really hard to get it back.