Handle event if http output finally fails

Elastic Stack Logstash
1

Hi all,

we are using Logstash for first time in a project and we are using it to process e-mails (imap input), transform some fields and send the event to an http output (Http output plugin | Logstash Reference [7.15] | Elastic)

output {
  http {
    url => "${HTTP_OUTPUT_URL}"
    http_method => "post"
    format => "json"
    retry_failed => failed
    automatic_retries => 5
  }
}

When the receiver system has temporary issues we retry five times.
But after that the output plugin gives up, which is fine for us but we would like react on that.
How we could archive this?
Is there any means of exception/error handling in the Logstash pipeline?

2

At the output stage an output can write failed events to a dead letter queue. Only the elasticsearch output implements this. There was a PR submitted two years ago to add DLQ support to the http output but nobody from elastic merged it.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.