ruby { code => " begin msg_age = (Time.now.to_i - event['@timestamp'].to_i) / 86400 if msg_age >= 30 event.cancel end rescue Exception => e event['logstash_ruby_exception'] = 'event age: ' + e.message end " }