From 4c17068639321c537e51114b17dc65ca431131fa Mon Sep 17 00:00:00 2001 From: Christian Weiske Date: Mon, 21 Oct 2013 15:32:40 +0200 Subject: [PATCH] --- drop-on-tag.conf | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 drop-on-tag.conf diff --git a/drop-on-tag.conf b/drop-on-tag.conf new file mode 100644 index 0000000..56c13b3 --- /dev/null +++ b/drop-on-tag.conf @@ -0,0 +1,10 @@ +filter { + grok { + match => [ "message", "something" ] + add_tag => [ "dropme" ] + tag_on_failure => [] + } + if "dropme" in [tags] { + drop {} + } +} -- 2.30.2