Ηere is the start of my filter
filter {
if "paloalto" in [tags] {
metrics {
meter => "events_paloalto"
flush_interval => 60
add_tag => "metric_paloalto"
}
...
And here is section of my output
if "metric_paloalto" in [tags] and "_grokparsefailure" not in [tags] {
elasticsearch {
hosts => ["localhost:9200"]
index => "raw_metrics-%{+YYYY.MM.dd.HH.mm}"
}
stdout { codec => rubydebug }
}
I am not getting anything on my stdout
nor or my elasticsearch
instance;
Any ideas?