Logstash is not parsing all logs


I have implemented simple filter, just to add a tag to the logs, filter:

filter {
if [src] == "source_syslog" {
mutate {
add_tag => [ "beparsed" ]

output {
elasticsearch {
index => "logstash-%{+xxxx.ww}"
hosts => ["[ip]:9200","[ip]:9200","[ip]:9200"]
manage_template => true

When checking in Kibana i can see that some logs are with a tag and some are not. What can be a reason for that?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.