FileBeat 5 - Parsing JSON - Why can't it parse the whole line

[Yarden_Bar]

Hi,
As documented, in order to parse json line logs, the json object must contain a key to pull the message object from.

Is there a particular reason that FB won't have the ability to parse the whole line (assuming that its a valid JSON object)?

Thank you,
Yarden

[andrewkroh]

@Yarden_Bar

Is there a particular reason that FB won't have the ability to parse the whole line (assuming that its a valid JSON object)?

It will parse the whole JSON object and include it in the event.

@Yarden_Bar

As documented, in order to parse json line logs, the json object must contain a key to pull the message object from.

The message_key is optional. "If no text key is defined, the line filtering and multiline features cannot be used."

[Yarden_Bar]

Thank you, @andrewkroh !

Its working as expected