How to parse json fields from a log which have multiple event but without delimiter? The logs are cloudwatch logs streamed to kinesis firehose and stored in s3 which is streamed to logstash

This worked for me mutate { gsub => ["message","}{","}FORSPLITLOGSTASH{"] } split{ field => message terminator => "FORSPLITLOGSTASH" } json{ source => message } } Thank you all !

How to parse json fields from a log which have multiple event but without delimiter

Elastic Stack Logstash

system (system) Closed August 23, 2019, 7:37am 9

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Parse single line multi object json with logstash Logstash	13	8661	December 12, 2019
How to parse custom logs with nested jsons Logstash	2	387	August 14, 2017
How to parse multiple json using logstash which can occure anywhere in the log Logstash	1	377	May 11, 2020
How to properly parse multi line json? Logstash	6	3846	June 20, 2019
How to parse jason in logstash Logstash	8	2568	July 6, 2017

How to parse json fields from a log which have multiple event but without delimiter

Related topics