How to output all data without mapping in http output


I have a logstash pipeline where I am simply wanting to parse logs, run a few filters, then output the entire payload to an external source via the http output plugin.

I am using format => "message" with a message key.

I understand there is the json format type however I must construct the payload with specific keys such as

  • Commands
  • Document

What variable in the output contains all data fields.

Code Example

http {
		format => "message"
		http_method => "post"
		content_type => "application/json"
		url => "**REDACTED_ENDPOINT**"
		message => '{"Commands":[{"Document":{"some_key": "%{some_value}", "data": %{**EXPECTED_VARIABLE_WITH_ALL_DATA}]}'

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.