Beats with json support

Jeferson_Martins · February 18, 2016, 2:40pm

Hi,

there's some plugin for this? I have all logs in JSON...

dadoonet · February 18, 2016, 3:02pm

I moved your question to the beats group.

tudor · February 18, 2016, 3:29pm

Not at the moment, but adding JSON support to Filebeat is something we're planning.

Jeferson_Martins · February 18, 2016, 4:08pm

OK, thanks

steffens · February 18, 2016, 5:06pm

Until filebeat gets json parsing support, you can parse the json in logstash by either using the json codec or the json filter in logstash.

Jeferson_Martins · February 18, 2016, 5:45pm

hmm,

but the filebeat has output plugin to redis?

steffens · February 18, 2016, 6:22pm

yes filebeat has support for output to redis (current implementation is deprecated and will be likely redone for 5..0 release), but forwarding to logstash or have redis->logstash you get json parsing of log-lines.

Jeferson_Martins · February 18, 2016, 7:25pm

ok, i'll try it.

Today I have some problems with Logstash 1.4.2 and I think the filebeat has created for resolve some Logstash problems.

fekete_robert · February 19, 2016, 7:29am

Hi, recent versions of syslog-ng can parse JSON messages, and can send them directly to Elasticsearch and Redis.