# How to drop or skip certain log events

**URL:** <https://community.graylog.org/t/how-to-drop-or-skip-certain-log-events/1210>\
**Category:** Graylog Central (peer support)\
**Created:** [May 22, 2017, 8:01pm UTC](https://community.graylog.org/t/how-to-drop-or-skip-certain-log-events/1210 "2017-05-22T20:01:48Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![surekuma7777](https://avatars.discourse-cdn.com/v4/letter/s/57b2e6/32.png) [@surekuma7777](https://community.graylog.org/u/surekuma7777)\
**Post date:** [May 22, 2017, 8:01pm UTC](https://community.graylog.org/t/how-to-drop-or-skip-certain-log-events/1210/1 "2017-05-22T20:01:48Z")

</div>

Hi

In Splunk, there is an option to skip/drop log events based on the regular expansion pattern.

For example, we would like to exclude heartbeat.jsp log events from getting indexed in Graylog.

Do we have this option in Graylog2, if yes could you please share some doc links or details?

Thanks  
Suresh

---

<div class="post-metadata">

**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\
**Post date:** [May 23, 2017, 8:29am UTC](https://community.graylog.org/t/how-to-drop-or-skip-certain-log-events/1210/2 "2017-05-23T08:29:12Z")

</div>

> [@surekuma7777](#):
>
> Do we have this option in Graylog2, if yes could you please share some doc links or details?

Yes, you can drop messages in a pipeline rule: [http://docs.graylog.org/en/2.2/pages/pipelines/functions.html#drop-message](http://docs.graylog.org/en/2.2/pages/pipelines/functions.html#drop-message)

---

<div class="post-metadata">

**Author:** ![surekuma7777](https://avatars.discourse-cdn.com/v4/letter/s/57b2e6/32.png) [@surekuma7777](https://community.graylog.org/u/surekuma7777)\
**Post date:** [May 25, 2017, 7:53am UTC](https://community.graylog.org/t/how-to-drop-or-skip-certain-log-events/1210/3 "2017-05-25T07:53:04Z")

</div>

Thanks a lot @jochen

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [June 8, 2017, 7:53am UTC](https://community.graylog.org/t/how-to-drop-or-skip-certain-log-events/1210/4 "2017-06-08T07:53:37Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.