How to parse json array to get object count

Elastic Stack Logstash
1

I have given one json log file as input in logstash and getting corresponding mapping in kibana but I want to count element available in json array object. need help to get that.

2

What do you want to count?

3

total number of objects in my tracks array

4

Create a file called countObjects.rb that contains this

def register(params)
    @field = params['field']
    @target = params['target']
end

def countObjects(object)
    c = 0
    if object
        c = 1
        if object.kind_of?(Array)
            object.each { |x| c += countObjects(x) }
        elsif object.kind_of?(Hash)
            object.each { |k, v| c += countObjects(v) }
        end
    end
    c
end

def filter(event)
    event.set(@target, countObjects(event.get(@field)))
    [event]
end

You can call it using

    ruby {
        path => "/home/user/countObjects.rb"
        script_params => { "field" => "someField" "target" => "count" }
    }

which will count the number of object in someField and add a count field to the event that contains the number.

1 Like
5

it showing me 0.not giving count

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.