Logstash Dead Letter Queues: Catching Failed Events Before They Vanish
Logstash's Dead Letter Queue captures events that outputs reject—mapping errors, schema mismatches, 4xx responses—so they can be inspected and replayed instead of silently dropped. Enable it per pipeline, rotate segments, and add a file-watcher for alerting.