title: How to get filebeat to ignore certain container logs
body: <p>I am using elasticserach 6.8 and filebeat 6.8.0 in a Kubernetes cluster. I want filebeat to ignore certain container logs but it seems almost impossible :).</p>
  
  <p>This is my autodiscover config</p>
  
  <pre><code>filebeat.autodiscover:
    providers:
     - type: kubernetes
       hints.enabled: true
       templates:
        - condition:
          contains:
            kubernetes.namespace: bagmessage
          config:
           - type: docker
             containers.ids:
               - "${data.kubernetes.container.id}"
             processors:
               - drop_event:
                   when:
                     or: 
                       - contains:
                           kubernetes.container.name: "filebeat"
                       - contains:
                           kubernetes.container.name: "weave-npc"
                       - contains:
                           kubernetes.container.name: "bag-fluentd-es"
                       - contains:
                           kubernetes.container.name: "logstash"
                       - contains:
                           kubernetes.container.name: "billing"
  </code></pre>
  
  <p>I've tried many variations of this configuration but still filebeats is processing container logs that I want it to ignore.</p>
  
  <p>I'd like to know if what I want to do is possible and if so, what am I doing wrong?</p>
  
  <p>Thanks</p>