Tagging errors parsing json messages

Elastic Stack Logstash
1

Hi all
we have elastic cloud 7.12 with logstash 7.12 parsing json messages and send them to elasticsearch, but as we are having issues with mismatch type I d like to tag the error when that happen.

Do you have any idea?
Is tag_on_failure a good way to go?
Cheers

2

Hi, by default the json filter will add a tag "_jsonparsefailure"

3

Thanks heaps.
So it's by default?

Didn't know that
Cheers

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.