How do I filter out DEBUG entries from a linux / Unix logfile with the heavy forwarder?

We're having some licensing violations when we need to turn on DEBUG on some of our services and we'd like to just have a regex nullqueue any debug entries before forwarding them to the indexers.