Ignor incorrect json format (jsonparsefailure)

[arp220 (david)]

Hi, I send a log with rsyslog to Kafka and my rsyslog config incorrect, so my json is wrong in Kafka topic. now, I want to consume with logstash and i want ignor all incorrect json message and only read correct json format from kafka.

my json incorret format is :

message => {\"name"\: \"srv1"\, {\timestamp\": \"sat, 20.04.2019\",\"location\":\"datacenter\"}

this json incorrect { befor timestamp, i want ignor all this messages.
thnaks a lot.

[Badger]

Try to parse it with a json failure and then drop it if it fails to parse

if "_jsonparsefailure" in [tags] { drop {} }

[arp220 (david)]

in filter block or output?

[Badger]

filter.