This message originated from Cribl Community Slack.
Click here to view the original link.
Dropping events - I would like to match events Event_ExternalApiEvent and drop them only if the event Event_EppDetectionSummaryEvent is not true. Has anyone the best idea for this?
Links for this message:
image.png
image.png
Solved
Event Filtering Issue: Drop Event_ExternalApiEvent If Event_EppDetectionSummaryEvent Is Not True
Best answer by jlawton589
Your filter should be something like this:
_rawOriginal.EventType == 'Event_ExternalApiEvent' && _rawOriginal.ExternalApiType != 'Event_EppDetectionSummaryEvent'Sign up
Already have an account? Login
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.