Hi,
I am trying to push some of our logs to elasticsearch via logstash. Can some one let me know how can I drop the logs in logstash itself if the logs are not in proper json format , before they are being pushed to elasticsearch.
I can see a _jsonparsefailure in the
tagsarray. But I am not sure how to search in the
tagsarray for
_jsonparsefailurestring and drop the log event? Can someone let me know the
filter` config for the logstash?