elastic / elastic/logstash

Expose DLQ feature for additional filters

Open
#7,207 5 comments 0 reactions 0 assignees View on GitHub
DLQ enhancement v5.5.0
Dominant language
Java
Stars
14.9k
Forks
3.5k
Avg merge
19h 14m
Merged PRs (30d)
63

Description

The DLQ feature currently only supports mapping exceptions from the Elasticsearch output. We should expose the option of dead lettering events that have errors during filter level field extraction or lookups in the listed plugins below. Introduction of a new plugin option: `on_error: dlq | tag` will allow users to choose to either dead letter or tag an event on failure or timeout. It will still default to tag in Logstash 5.x.

- [ ] grok
- [ ] dissect
- [ ] date
- [ ] geoip
- [ ] kv
- [ ] dns
- [ ] useragent

/cc @suyograo

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.