How to pick up certain Logstash events so I can ignore/work on them

This error is already at the output block of the pipeline and you can't catch it.

But 409 errors logs a warn and are dropped, there is no retry when Elasticsearch respond with an 409 error.

You probably have some kind of race condition in your pipeline trying to create/update the same document id, this post may explain better what could cause an 409 error.

1 Like