The logstash documentation on "common options" says, one can add field or tags on success
Is there anyway i can add field or tag on failure ?
Not in general, but a number of filters (grok, csv, xml, ...) add a tag when they fail. Of course, instead of triggering on a tag you could trigger on the absense of a tag (indicating that the filter failed), so whatever you want to accomplish is probably possible.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.