Logstash split filter throwing _split_type_failure

Hi Team,

I have a situation to break json using split filter which works fine. But certain scenarios where some subkeys of json are optional. when the split filter is not able to find a specific key to split it is throwing a _split_type_failure in tags.Is there a way to ignore the optional json keys if not found ?

My split filter is as follows.

filter {
split { field => "[result]" } # Mandatory
split { field => "[matches]" } # Optional


You could use a conditional

if [matches] { split { field => "[matches]" } }

Still not working

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.