How to show the JSON spring boot logs as a seperate fields out of the messages in the table format

Elastic Stack Kibana
1

Hi,
I have a task that i need to view the spring boot JSON logs in the table format. It should not dump into the message field of kibana. It has to view as a seperate field in the table format.

Eg: EmployeeId 123
EmployeeName aathi
EmployeeAddress banglore.
I have used the Json processor to split the json log as a seperate variable to view it in a table format but i am not able to view the json logs in the table format.

2

How are your logs indexed in Elasticsearch? Do you have fields for EmployeeId, EmployeeName, EmployeeAddress?

How are you viewing your logs?

If you are viewing your logs in Logs application, click settings and then configure Log columns

Screen Shot 2020-10-31 at 7.57.06 AM
Screen Shot 2020-10-31 at 7.57.06 AM4086×2138 430 KB

If you are viewing your logs in Discover application, hover over a field on the left and then click the plus icon to add a column

Screen Shot 2020-10-31 at 7.58.39 AM
Screen Shot 2020-10-31 at 7.58.39 AM4088×2052 1.28 MB

3

I would suggest to this dependency to format your spring boot logs into ECS directly and ship them with filebeat into elasticsearch.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.