Logstash is not parsing all logs

Elastic Stack Logstash
1

Hi,

I have implemented simple filter, just to add a tag to the logs, filter:

filter {
if [src] == "source_syslog" {
mutate {
add_tag => [ "beparsed" ]
}
}
}

output {
elasticsearch {
index => "logstash-%{+xxxx.ww}"
hosts => ["[ip]:9200","[ip]:9200","[ip]:9200"]
manage_template => true
}
}

When checking in Kibana i can see that some logs are with a tag and some are not. What can be a reason for that?
Thanks

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.