I am wondering what the best approach to take with my Logstash Grok filters. I have some filters that are for specific log entries, and won\'t apply to all entries. The on
This is the most efficient way of doing this. Ignore the filter
filter { grok { match => [ "message", "something"] } if "_grokparsefailure" in [tags] { drop { } } }