How to parse the json string

Elastic Stack Logstash
#1

I have a log file, which the content like below

{"log":"{\"time\":\"2020-12-02 22:42:00,535\", \"a_key\":\"a_value\"}\n","stream":"stdout","time":"2020-12-02T22:42:05.58702969Z"}

I want to parse the log field to json object, how to do that in logstash filter?

#2

if it is pure json, in the "input" stanza of your logstash, you just need to mention code=> json (json codec)
if the original data as "json" in individual lines, then use json_lines

so something like..

input {
....
     codec => json
...
}

filter { }

output {
.. whatever...
}

Or if you want to filter as json, follow the example below

#3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.