I am trying to parse JSON (from MongoDB) to Kibana through Logstash. I keep getting all the data in a "log_entry" field. This field does not exist in my data but rather is being created by Logstash.
In my CONF file, I have my filter empty. I have tried adding JSON with source as a specific field but that does not work either.
Any ideas?
The log_entry field is not valid JSON, which is why the json filter fails.
my data structure has NO field with the name "log_entry".. Logstash is creating this. I want to import the individual fields but unable to do so
What does you configuration look like?
I suspect that structure is created by the mongodb input plugin, which I have personally never used. I am not sure how commonly used it is, so you may want to reach out to the creator as well.