I have a logstash filter to pass my log, my log contain json and non-json log, I want both send to elastic search no matter json parse success or failed.
I found from logstash, for the failed parse log, it shows:
LogStash::Json::ParserError: Illegal unquoted character ((CTRL-CHAR, code 10)): has to be escaped using backslash to be included in string value
but from elastic search, I can't found those log which parse failed. only can see the success one.
I didn't use any drop, doesn't any one know what could be wrong?