# Decode JWT token with logstash

**URL:** https://discuss.elastic.co/t/decode-jwt-token-with-logstash/168696
**Category:** Logstash
**Created:** [February 16, 2019, 4:02pm UTC](https://discuss.elastic.co/t/decode-jwt-token-with-logstash/168696 "2019-02-16T16:02:53Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![yossiv](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yossiv/32/10662_2.png) [@yossiv](https://discuss.elastic.co/u/yossiv)
#### Post date: [February 16, 2019, 4:02pm UTC](https://discuss.elastic.co/t/decode-jwt-token-with-logstash/168696/1 "2019-02-16T16:02:53Z")

</div>

Hi Guys, i was wondering if there is any way to decode JWT token with logstash?  
i didnt find anything about this.

---

<div class="post-metadata">

### Author: ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [February 16, 2019, 5:30pm UTC](https://discuss.elastic.co/t/decode-jwt-token-with-logstash/168696/2 "2019-02-16T17:30:09Z")

</div>

There are Ruby libraries that encode and decode JWT, so it would be possible to integrate one of them into a ruby filter. Or even define a new jwt filter. I am not aware of anyone having done so.

---

<div class="post-metadata">

### Author: ![yossiv](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yossiv/32/10662_2.png) [@yossiv](https://discuss.elastic.co/u/yossiv)
#### Post date: [February 16, 2019, 6:46pm UTC](https://discuss.elastic.co/t/decode-jwt-token-with-logstash/168696/3 "2019-02-16T18:46:57Z")

</div>

i found this one..

> **[VeritoneAlpha/logstash-jwt](https://github.com/VeritoneAlpha/logstash-jwt)**
>
> Contribute to VeritoneAlpha/logstash-jwt development by creating an account on GitHub.

  
but cant make it work..

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [February 16, 2019, 8:23pm UTC](https://discuss.elastic.co/t/decode-jwt-token-with-logstash/168696/4 "2019-02-16T20:23:16Z")

</div>

As requested by the OP, see [Decode JWT toekn into new filed](https://discuss.elastic.co/t/decode-jwt-toekn-into-new-filed/168593)

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [February 16, 2019, 8:23pm UTC](https://discuss.elastic.co/t/decode-jwt-token-with-logstash/168696/5 "2019-02-16T20:23:18Z")

</div>


