# Pipeline question
**URL:** https://community.graylog.org/t/pipeline-question/14546
**Category:** Graylog Central (peer support)
**Created:** [March 19, 2020, 12:47pm UTC](https://community.graylog.org/t/pipeline-question/14546 "2020-03-19T12:47:17Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@MalinkinSA](https://community.graylog.org/u/MalinkinSA)
#### Post date: [March 19, 2020, 12:47pm UTC](https://community.graylog.org/t/pipeline-question/14546/1 "2020-03-19T12:47:17Z")
Hello,I have a stream, and i want to drop some event using pipeline.
1. I create a pipeline and connect to my stream.
2. Create two stage and two rule:
rule “src\_ip”
when
true
then
let mess = to\_string($message.message);
let parsed = grok(pattern: “%{IPV4:src\_ip}”,value: mess);
set\_fields(parsed);
end
3. Copy RAW filebeats output to simulator:
> **Message would be dropped**
>
> The pipeline processor would drop such a message. That means that the message **would not be stored** , and would not be available for searches, alerts, outputs, or dashboards.
But if a launch filebeat to send logs - it’s not working.
---
### Author:  [@jan](https://community.graylog.org/u/jan)
#### Post date: [March 23, 2020, 12:24pm UTC](https://community.graylog.org/t/pipeline-question/14546/2 "2020-03-23T12:24:07Z")
he @MalinkinSA
what is your processing order in `System > configuration`?
---
### Author:  [@MalinkinSA](https://community.graylog.org/u/MalinkinSA)
#### Post date: [March 24, 2020, 5:49am UTC](https://community.graylog.org/t/pipeline-question/14546/3 "2020-03-24T05:49:34Z")
Hello @jan
Pipeline Processor - enabled;
### Order
Use drag and drop to change the execution order of the message processors.
AWS Instance Name Lookup
GeoIP Resolver
Pipeline Processor
Message Filter Chain
---
### Author:  [@jan](https://community.graylog.org/u/jan)
#### Post date: [March 24, 2020, 6:52am UTC](https://community.graylog.org/t/pipeline-question/14546/4 "2020-03-24T06:52:18Z")
you might want to change the oder @MalinkinSA
message filter chain
pipeline processor
and disable aws dn geoip if you do not use that.
---
### Author:  [@MalinkinSA](https://community.graylog.org/u/MalinkinSA)
#### Post date: [March 24, 2020, 9:59am UTC](https://community.graylog.org/t/pipeline-question/14546/5 "2020-03-24T09:59:12Z")
Many thanks, in test case that’s all ok.
---
### Author:  [@system](https://community.graylog.org/u/system)
#### Post date: [April 7, 2020, 9:59am UTC](https://community.graylog.org/t/pipeline-question/14546/6 "2020-04-07T09:59:20Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.