# How To parse Json in json

**URL:** <https://discuss.elastic.co/t/how-to-parse-json-in-json/194720>\
**Category:** Logstash\
**Created:** [August 10, 2019, 8:20pm UTC](https://discuss.elastic.co/t/how-to-parse-json-in-json/194720 "2019-08-10T20:20:05Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![zbawio](https://avatars.discourse-cdn.com/v4/letter/z/d07c76/32.png) [@zbawio](https://discuss.elastic.co/u/zbawio)\
**Post date:** [August 10, 2019, 8:20pm UTC](https://discuss.elastic.co/t/how-to-parse-json-in-json/194720/1 "2019-08-10T20:20:05Z")

</div>

Hi , i am new to ELK and i wonder how can i parse json have json

For ex:  
my "Content" field have String but this string is also a json

```
{
"Method":"some string",
"Request":"some string",
 "Time":"Datetime",
 "Content":
   "{
   "CustomerId":"int",
   "Code": "deneme",
   "Name": "string",
   "FirstName": "string",
   "LastName": "string"
   }"

```

How can i get the fields in "content" field and add them ? i mean my output should be :

```
{
 "Method":"some string",
 "Request":"some string",
 "Time":"Datetime",
 "CustomerId":"int",
 "Code": "deneme",
 "Name": "string",
 "FirstName": "string",
 "LastName": "string"
 }
```

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [August 11, 2019, 12:16pm UTC](https://discuss.elastic.co/t/how-to-parse-json-in-json/194720/2 "2019-08-11T12:16:07Z")

</div>

See [this](https://discuss.elastic.co/t/how-to-dynamically-move-nested-key-value-to-root-level/180006/2) thread.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 8, 2019, 12:16pm UTC](https://discuss.elastic.co/t/how-to-parse-json-in-json/194720/3 "2019-09-08T12:16:14Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.