For the http_poller input I have used the "add_field" option which works perfect when the request succeeds. But when the request fails (falls into the handle_failure method) the "add_field" option is not honored. I wonder if this is because the decorate(event) done in handle_decoded_event is not present in the handle_failure. From the code for the base event in Logstash, it looks to me like the decorate method is the one that adds the custom fields. Would it be possible to add the decorate to the handle_failure for http_poller?