Hi, I want to parse this JSON object to ELK { "Format": "IDEA0", "ID": "2b03eb1f-fc4c-4f67-94e5-31c9fb32dccc", "DetectTime": "2022-01-31T08:16:12.600470+07:00", "EventTime": "2022-01-31T01:23:01.637438+00:00", "Category": ['Intrusion.Botnet'], "Confidence": 0.03, "Note": "C&C channel, destination …

How to use Grok for JSON parsing

stephenb (Stephen Brown) January 31, 2022, 2:49am 2

Perhaps take a look at this thread.

Topic		Replies	Views
How to create grok/json filter to parse the below json format Logstash	10	6118	March 2, 2022
How can I parse nested JSON strings to JSON objects? Logstash	7	1453	November 28, 2021
How to parse/load JSON file or .TXT file containing JSON to logstash using GROK Logstash	5	20139	May 14, 2020
How to use GROK pattern for JSON Object Logstash	4	2787	October 24, 2018
How to parse a json message Logstash	8	3123	November 9, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

How to use Grok for JSON parsing

Related Topics