input
{
    file
    {
        path => "C:\Users\test\Documents\error.log"
    }
}

filter{
    ruby
    {
        code =>
        "
        if event['message'].include?('test') then  ##  DROP all lines by filter
                event.cancel
        end
#        event['zabbix_host'] = 'windows' #   (the host configured in Zabbix)
#        event['zabbix_item'] = 'win.key' #   (the item key on the host in Zabbix)
        event['send_field'] = 'message' #   (the field name that is sending to Zabbix)
        "
    }
}

output {
        zabbix
        {
            zabbix_server_host => '192.168.93.179'
	    zabbix_host => windows
#	    multi_value => ['win.key']
	    zabbix_key => "win.key"
        }
         file {
             path => "C:\Users\test\Documents\parse-error.log"
         }

}