Grok multiple pattern and tag_on_failure for each pattern

Elastic Stack Logstash
2

Use the following

  grok {
    break_on_match => true
    tag_on_failure => ["parse-failed"]
    match => [ 'message', '%{PATTERN1}' ]
    match => [ 'message', '%{PATTERN2}' ]
    match => [ 'message', '%{PATTERN3}' ]
}