Help with embedded JSON flatten - Ruby Filter

Frrrrrunkis · February 1, 2019, 8:53pm

utilized this script from Chris Lyons

gist.github.com

https://gist.github.com/cjlyons81/8f47a281934c8e7c040d7bf8985db331

json-to-event.rb

#  ruby {
#    path => "/etc/logstash/ancillary/ruby-scripts/json-to-event.rb"  <--Example path to ruby file, be sure to update with yours
#    script_params => { 
#      "json_field" => "notes"      <--Specify the field you want to extract json from (default: message)
#      "array" => true              <--Do you want to flatten arrays within the json (default: false)
#      "target" => "parent"         <--Specify root level name if wanted (default: root of document)
#      "tag_match_failure" => true  <--Do you want to tag event when json regex match fails (defaults: false)
#    }
#  }

This file has been truncated. show original

found this topic - Ruby filter for parsing deeply nested JSON in pipeline