This functionality is experimental and may be changed or removed completely in a future release. Elastic will take a best effort approach to fix any issues, but experimental features are not subject to the support SLA of official GA features.

NOTE: This You are looking at documentation for an older release. For the latest information, see the current release documentation.

« Decode JSON fields Drop fields from events »

› › ›

Drop events

edit

Drop events

edit

The drop_event processor drops the entire event if the associated condition is fulfilled. The condition is mandatory, because without one, all the events are dropped.

processors:
 - drop_event:
     when:
        condition

See Conditions for a list of supported conditions.

« Decode JSON fields Drop fields from events »