errorOnly

Limit bulk error-file output to failed records.

This parameter applies to omelasticsearch: Elasticsearch Output Module.

Name:

errorOnly

Scope:

action

Type:

boolean

Default:

off

Required?:

no

Introduced:

at least 8.x, possibly earlier

Description

When enabled, omelasticsearch writes only records that Elasticsearch reported as failed to the configured errorFile.

This option affects the format of the error file in bulk mode. Without it, the error file includes the full bulk request and response context for a failed bulk operation. With errorOnly="on", entries that succeeded inside the same bulk response are omitted from the error-file payload.

Action usage

action(type="omelasticsearch" errorFile="..." errorOnly="on")

See also

See also omelasticsearch: Elasticsearch Output Module, errorFile, and interleaved.

---

Support: rsyslog Assistant | GitHub Discussions | GitHub Issues: rsyslog source project

Contributing: Source & docs: rsyslog source project

© 2008–2026 Rainer Gerhards and others. Licensed under the Apache License 2.0.