Logstash split filter throwing _split_type_failure

[karthiknpy (Karthik K)]

Hi Team,

I have a situation to break json using split filter which works fine. But certain scenarios where some subkeys of json are optional. when the split filter is not able to find a specific key to split it is throwing a _split_type_failure in tags.Is there a way to ignore the optional json keys if not found ?

My split filter is as follows.

filter {
split { field => "[result]" } # Mandatory
split { field => "[matches]" } # Optional
}

Regards
Karthik.K

[Badger]

You could use a conditional

if [matches] { split { field => "[matches]" } }

[karthiknpy (Karthik K)]

Still not working