Tagging errors parsing json messages

Hi all
we have elastic cloud 7.12 with logstash 7.12 parsing json messages and send them to elasticsearch, but as we are having issues with mismatch type I d like to tag the error when that happen.

Do you have any idea?
Is tag_on_failure a good way to go?
Cheers

Hi, by default the json filter will add a tag "_jsonparsefailure"

Thanks heaps.
So it's by default?

Didn't know that
Cheers

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.