WARNING: Version 6.2 of Winlogbeat has passed its EOL date.
This documentation is no longer being maintained and may be removed. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.
drop_event processor drops the entire event if the associated condition
is fulfilled. The condition is mandatory, because without one, all the events
processors: - drop_event: when: condition
See Conditions for a list of supported conditions.