Drop events [drop-event]

docs/reference/winlogbeat/drop-event.md

9.4.0379 B

Drop events [drop-event]

The drop_event processor drops the entire event if the associated condition is fulfilled. The condition is mandatory, because without one, all the events are dropped.

yaml

processors:
  - drop_event:
      when:
        condition

See Conditions for a list of supported conditions.