How to Parsing Nested Json

Elastic Stack Logstash
1

So i have log that alreary parse in json. But i want to parsing again that nested?

This the log i manipulated cause is sensitive data. And i want to parse again is it inside responsePayload.data

{"cif":"XXX","gram":"XXX","hakNasabah":"XXX","harga":"XXX","saldoReksaDana":"XXX","saldoNominal":"XXX","satuan":"XXX","tglBuka":"XXX","namaRencana":"XXX","administrasi":"XXX","jenisTransaksi":"XXX","namaNasabah":"XXX","namaProduk":"TABUNGAN PENDIDIKAN","nilaiTransaksi":"XXX","norek":"XXX","reffCore":"XXX","reffSwitching":"XXX","surcharge":"XXX","tglTransaksi":"XXX","totalKewajiban":"XXX"}

Thank You

2

Hi @zerratriani ,

You're using Logstash, right? Can you share your current configuration?

3

If your JSON contains serialized JSON in fields, like this:

{"stuff": "...", "responsePayload": {"data": "{\"redacted\":\"foo\"}" } }

then you can use json filters to parse it.

    json { source => "message" target => "parsed_message" }
    json { source => "[parsed_message][responsePayload][data]" target => "parsed_payload" }

will produce

"parsed_payload" => {
    "redacted" => "foo"
},
"parsed_message" => {
    "responsePayload" => {
        "data" => "{\"redacted\":\"foo\"}"
    },
              "stuff" => "..."
}

so what does your message look like? Your example does not include anything called responsePayload

4

Thank you it worked