Hey
Check this out
Correct me if Im wrong but if your routing a message/log then its now indexed which I think defeats the purpose here. Are you trying to drop a message to save room or to minimize the amount of data ingested per day?
Related topics
| Topic | Replies | Views | Activity | |
|---|---|---|---|---|
| Drop debug logs with pipeline | 4 | 1749 | February 13, 2019 | |
| Unable to Drop syslog messages based on message contents | 12 | 1140 | September 4, 2022 | |
| Pipeline doesn't work | 5 | 1360 | March 11, 2020 | |
| Drop message from Pipeline not working | 4 | 1747 | March 30, 2020 | |
| Pipeline silently dropping messages | 3 | 1016 | September 1, 2020 |