Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

tag_unsuccessful_lookup called when source field does not exist #159

Open
TheVastyDeep opened this issue Aug 16, 2019 · 0 comments
Open

Comments

@TheVastyDeep
Copy link

TheVastyDeep commented Aug 16, 2019

If the source field does not exist most filters (csv, date, grok, kv) are a no-op. They silently do nothing. The geoip adds the lookup failure tag. I think that is undesireable. If it cannot changed then it should be documented, since is unexpected.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant