# Can filebeat decode embedded json string in a particular field
**URL:** https://discuss.elastic.co/t/can-filebeat-decode-embedded-json-string-in-a-particular-field/59097
**Category:** Beats
**Tags:** filebeat
**Created:** [August 27, 2016, 8:01pm UTC](https://discuss.elastic.co/t/can-filebeat-decode-embedded-json-string-in-a-particular-field/59097 "2016-08-27T20:01:01Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@yanjun](https://discuss.elastic.co/u/yanjun)
#### Post date: [August 27, 2016, 8:01pm UTC](https://discuss.elastic.co/t/can-filebeat-decode-embedded-json-string-in-a-particular-field/59097/1 "2016-08-27T20:01:01Z")
We have docker json-file logger produces this kind of log messages (docker meta data removed)
{"log":"{"test":"test"}"}
Is it possible to configure filebeat5.0 to also decode the string inside "log"? Or we have to use something like Logstash Json filter.
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [August 27, 2016, 11:35pm UTC](https://discuss.elastic.co/t/can-filebeat-decode-embedded-json-string-in-a-particular-field/59097/2 "2016-08-27T23:35:50Z")
You need to use LS.
---
### Author:  [@yanjun](https://discuss.elastic.co/u/yanjun)
#### Post date: [August 28, 2016, 4:18am UTC](https://discuss.elastic.co/t/can-filebeat-decode-embedded-json-string-in-a-particular-field/59097/3 "2016-08-28T04:18:31Z")
It seems should be done at producing host. I can take a look to add an option in prospector or processor
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 17, 2016, 8:01pm UTC](https://discuss.elastic.co/t/can-filebeat-decode-embedded-json-string-in-a-particular-field/59097/4 "2016-09-17T20:01:55Z")
This topic was automatically closed after 21 days. New replies are no longer allowed.