Thank you for your rapid replies, I will follow @Ponet solution but now I am looking how to drop message from specific station.
import org.graylog2.plugin.Message
import java.util.regex.Matcher
import java.util.regex.Pattern
rule “Blacklist Station002”
when
source == “Station002”
then
drop_message();
end