Creating an error index

Elastic Stack Logstash
1

Hi all,

So I am in the processing of migrating configs for my technologies from the grok filter to dissect filter. I want to output the dissect tag failures into a separate error index and the parsed data in another index.

I know I can do conditionals in the output section, but is there any way I could forward it to a indices at the filter section?

Regards,
Kabi

2

I know I can do conditionals in the output section, but is there any way I could forward it to a indices at the filter section?

No. What's wrong with using conditionals in the output section?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.