Maybe a stupid question…
I put a pipeline in place which drops syslog messages of level 6.
There are too many and few of them are relevant to our need.
Are those messages still counted as ingested messages in System / Overview ?
Thanks ahead !
From what I read, messages that make it into Elasticsearch, minus some overhead, are what is counted. So if you are dropping the messages they should not be counted. More detail in this similar question:
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.