How to parse and add filter in nested json

Elastic Stack Logstash
1

Hi,

I am trying to parse below json.

{
"s_no":1011,
"uuid":"1f86c6ce84678e9bd5d67bcd49a86d3a99129d80",
"data":{
"time":"2019-01-01T13:32:10.8287355Z",
"system":{
"processors":[
{
"name":"Intel(R) Core(TM) i5-3570 CPU @ 3.40GHz",
"cores":4,
"logical_processors":4
}
],
"memory":"8457871360"
},
"os":{
"product":"Windows 10 Pro x64",
"build":9200
}
}
}

For this Json how to add filter?

2

If you have an event that contains that in the message field you can parse it using

json { source => "message" }
3

Tried with following filter

filter {
json {
source => "message"
}
}

didn't get any error but index was not created.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.