WARNING: Version 6.0 of Winlogbeat has passed its EOL date.

This documentation is no longer being maintained and may be removed. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.

« Decode JSON fields Drop fields from events »
Elastic Docs ›Winlogbeat Reference [6.0] ›Configuring Winlogbeat ›Filter and Enhance the exported data

Drop events

edit

Drop events

edit

The drop_event processor drops the entire event if the associated condition is fulfilled. The condition is mandatory, because without one, all the events are dropped.

processors:
 - drop_event:
     when:
        condition

See Conditions for a list of supported conditions.

« Decode JSON fields Drop fields from events »