Breaking json array into granular events using filebeat script processor

Elastic Stack Beats
1

Hi Team,

I got a crazy thought to split JSON array which filebeat read from redis list input.
Then filebeat script processor splits it into granular events and writes to elastic.

I know I should be using logstash json split filter for this. But I'm keen to know if script processor can help me for this.

Can anyone please guide me to achieve this?

Regards
Karthik.K

1 Like
2

No, processors in Beats are limited in that they cannot produce new events. It's one event in and at most, one event out.

3

Hi Andrew,

Logstash is slow and its too heavy application. I created a 8GB server for one logstash instance and it uses 90% above of the CPU. Is there any alternatives to logstash you can suggest ?

I dont deny that it contains support plugins for almost everything under the sun.

Regards
Karthik.K

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.