Add field or tag on failure

Elastic Stack Logstash
1

The logstash documentation on "common options" says, one can add field or tags on success

Is there anyway i can add field or tag on failure ?

2

Not in general, but a number of filters (grok, csv, xml, ...) add a tag when they fail. Of course, instead of triggering on a tag you could trigger on the absense of a tag (indicating that the filter failed), so whatever you want to accomplish is probably possible.

3

Thank you @magnusbaeck

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.