How to get logs and it's data having word "error" in then and how to configure logstashPipeLine.conf file for the same?
Please look at this link: Ignore and move to next pattern if log contains a specific word
The first step is to look whehther input has error as key word, if so, continue the parsing by second grok. If no, just forget the input.