Hi, I want to parse this JSON object to ELK { "Format": "IDEA0", "ID": "2b03eb1f-fc4c-4f67-94e5-31c9fb32dccc", "DetectTime": "2022-01-31T08:16:12.600470+07:00", "EventTime": "2022-01-31T01:23:01.637438+00:00", "Category": ['Intrusion.Botnet'], "Confidence": 0.03, "Note": "C&C channel, destination …

How to use Grok for JSON parsing

stephenb (Stephen Brown) January 31, 2022, 2:49am 2

Perhaps take a look at this thread.

Topic		Replies	Views
How to create grok/json filter to parse the below json format Logstash	10	6194	March 2, 2022
Grok to parse Json in a Json Logstash	2	288	April 2, 2020
Logstash filter to parse json --> json deserialized string Logstash	2	2649	February 5, 2018
How can I parse nested JSON strings to JSON objects? Logstash	7	1458	November 28, 2021
How to parse/load JSON file or .TXT file containing JSON to logstash using GROK Logstash	5	20227	May 14, 2020

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

How to use Grok for JSON parsing

Related topics