logstash-plugins/logstash-filter-geoip

tag_unsuccessful_lookup called when source field does not exist

Opened this issue · 0 comments

If the source field does not exist most filters (csv, date, grok, kv) are a no-op. They silently do nothing. The geoip adds the lookup failure tag. I think that is undersireable. If it cannot changed then it should be documented, since is unexpected.