Great suggestion, I didn't know about that function. And it's something I will incorporate into my larger config that has multiple filters.
But....even with the addition of tag_on_failure it still returns nothing except the _grokparsefailure. There are no other grok in this config except this one. I know it's not the best idea, but my only other option is...... remove_tag => "_grokparsefailure" Like I said, the actual filter and everything else works just fine. Thanks, -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/5ff5d923-f415-49fd-b224-7851868c32d9%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
