The grok tag_on_failure option is really helpful. I think date filter should have it too. It's particularly hard to notice date failures because logstash will set the @timestamp attribute to something close even if it fails, so you have to look carefully to see that it's wrong.