BUG: JSON Filter Plugin needs target?

This log line from the most recent version of this plugin:

Parsed JSON object/hash requires a target configuration option {:source=>"unparsed", :raw=>"                "}

Contradicts the documentation here:
https://www.elastic.co/guide/en/logstash/current/plugins-filters-json.html#plugins-filters-json-target

Which source of information is meant to be wrong? The documentation or the code/log line?

target is mandatory iff the JSON string parses into anything but an object (hash). In this case it appears you're trying to parse a string containing whitespace, which doesn't produce an object.

Would it respond by tagging the message with the failure field?

I'm not sure I get the question, but If target isn't set when it needs to be set the event will be tagged with the tags in tag_on_failure.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.