Hi, I have a logfile, which sadly is mixed. There are JSON lines, and there are free text lines. The good news is, that there is always a line break and JSON parsing works. Currently I do: if "_jsonparsefailure" in [tags] { drop { } } I'd like to have an earlie…

Check that a message is in JSON to avoid _jsonparsefailure

Topic		Replies	Views
Logstash parse only JSON messages Logstash	3	411	June 29, 2018
Drop logs when there is a jsonparsefailure Logstash	4	4930	July 6, 2017
Json parse failure even when the json is valid Logstash	7	493	July 25, 2018
Drop logs on the basis _jsonparsefailure Logstash	4	1441	November 6, 2018
Logstash regexp if not working Logstash	3	1244	July 10, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Check that a message is in JSON to avoid _jsonparsefailure

Related topics