(no commit message)

diff --git a/drop-on-tag.conf b/drop-on-tag.conf
new file mode 100644 (file)
index 0000000..56c13b3
--- /dev/null
+++ b/drop-on-tag.conf
@@ -0,0 +1,10 @@
+filter {\r
+  grok {\r
+    match => [ "message", "something" ]\r
+    add_tag => [ "dropme" ]\r
+    tag_on_failure => []\r
+  }\r
+  if "dropme" in [tags] {\r
+    drop {}\r
+  }\r
+}\r