stour
(Shrimant Taur)
April 30, 2019, 6:06am
1
Hi,
I am trying to parse below json.
{
"s_no":1011,
"uuid":"1f86c6ce84678e9bd5d67bcd49a86d3a99129d80",
"data":{
"time":"2019-01-01T13:32:10.8287355Z",
"system":{
"processors":[
{
"name":"Intel(R) Core(TM) i5-3570 CPU @ 3.40GHz",
"cores":4,
"logical_processors":4
}
],
"memory":"8457871360"
},
"os":{
"product":"Windows 10 Pro x64",
"build":9200
}
}
}
For this Json how to add filter?
Badger
April 30, 2019, 2:14pm
2
If you have an event that contains that in the message field you can parse it using
json { source => "message" }
stour
(Shrimant Taur)
May 2, 2019, 5:39am
3
Tried with following filter
filter {
json {
source => "message"
}
}
didn't get any error but index was not created.
system
(system)
Closed
May 30, 2019, 5:39am
4
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.