Logstash json filter fail to send to elasticearch when parse json error

Elastic Stack Logstash
1

Hi there,

I have a logstash filter to pass my log, my log contain json and non-json log, I want both send to elastic search no matter json parse success or failed.

I found from logstash, for the failed parse log, it shows:
LogStash::Json::ParserError: Illegal unquoted character ((CTRL-CHAR, code 10)): has to be escaped using backslash to be included in string value

but from elastic search, I can't found those log which parse failed. only can see the success one.

I didn't use any drop, doesn't any one know what could be wrong?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.