The problem is that by default (without merge-by-job or merge-by-host or clean), parse rereads the stream and then dumps it verbatim without filtering. This makes sense for filters applied to merged data but not record filters, which can be applied just fine here. It is a change from the Rust code, which would apply the record filter in this case.
As a workaround, one can use -clean in many cases.
The problem is that by default (without merge-by-job or merge-by-host or clean),
parse
rereads the stream and then dumps it verbatim without filtering. This makes sense for filters applied to merged data but not record filters, which can be applied just fine here. It is a change from the Rust code, which would apply the record filter in this case.As a workaround, one can use -clean in many cases.