playground. Filter out logs for condition

[agardnerIT]

I'm new to VRL and using the playground. I have an input event:

{
  "foo": "bar",
  "incoming_status": "INFO"
}

I want a rule which ignores (drops) any event where incoming_status != ERROR

In other words, I'm expecting output to be {} or None or null (or however VRL represents "nothing").

I can't find anything relevant in the filter documentation

[jorgehermo9]

I think the filter transform with this condition should work like that:

transforms:
  my_transform_id:
    type: filter
    inputs:
      - my-source-or-transform-id
    condition: .incoming_status != "ERROR"

https://vector.dev/docs/reference/configuration/transforms/filter/

[agardnerIT]

Thanks, perhaps I'm misunderstanding or misusing the playground?

https://playground.vrl.dev/?state=eyJwcm9ncmFtIjoiIyBSZW1vdmUgc29tZSBmaWVsZHNcbi5pbmNvbWluZ19zdGF0dXMgIT0gXCJFUlJPUlwiIiwiZXZlbnQiOnsiaW5jb21pbmdfc3RhdHVzIjoiRVJST1IyIiwibWVzc2FnZSI6IkhlbGxvIFZSTCIsImZvbyI6ImRlbGV0ZSBtZSIsImh0dHBfc3RhdHVzIjoiMjAwIn0sImlzX2pzb25sIjpmYWxzZSwiZXJyb3IiOm51bGx9

[jorgehermo9]

Thats a valid expression in vrl that evaluates to true, but does not modify anything (like boolean expressions in others programming languages)

You should specify that vrl program as the condition field of the transform component (as I depicted in my previous message)

Take a look at this tutorial about Vector basics https://vector.dev/guides/level-up/transformation/

and read this first https://vector.dev/docs/about/concepts/

hope that helps! If you are still lost, ping me 😁