How to drop or skip certain log events

Graylog Central (peer support)
1

Hi

In Splunk, there is an option to skip/drop log events based on the regular expansion pattern.

For example, we would like to exclude heartbeat.jsp log events from getting indexed in Graylog.

Do we have this option in Graylog2, if yes could you please share some doc links or details?

Thanks
Suresh

2

Yes, you can drop messages in a pipeline rule: http://docs.graylog.org/en/2.2/pages/pipelines/functions.html#drop-message

3

Thanks a lot @jochen