I am trying to drop_message (); when packetbeat_client_ip == 192.168.10.2. Below is my rule and pipeline. However I see that pipeline is not working as expected.
Can someone please help?
when has_field("packetbeat_client_ip") && $message.packetbeat_client_ip == "192.168.10.2" then drop_message(); end
Do you guys see any issue in this?