Hello, dear all,
I updated the logstash from vesrion 2.1 to 6.4, and I find there are some differences between them which caused my problem.
I cannot find any logs that don't match my grok filters in the kibana for version 6.4, but for the older logstash, I can find them with the tags: "_grokparsefailure ".
I also can't see any error in the /var/log/logstash/logstash-plain.log for the new version logstash.
And I can find it many _grokparsefailure in the /var/log/logstash/logstatsh.log for the old version logstash.
And for me, I need to save all the logs in the elasticsearch, include the parse error log.
How can I do my job for losgtash v6.4?
Any advice is very appreciated, thanks in advance.