Http output in logstash with additional body requirements

Elastic Stack Logstash
1

I have a logstash config file below but the api I'm using requires a body that looks like this, how can i pass that information to the http output configuration.

[
{
"class":"stuff",
"details":"more stuff"
}
]

input {
snmptrap {
id => "my_snmp"
port => 162
}
}
output {

stdout {

codec => rubydebug

}

http
{

 url=>"https://xxxxxxxxxxxxxxxx"

"
http_method=>"post"
content_type=>"application/json"
format=>"json_batch"
retry_failed=>false
http_compression=>true
headers => {
"Authorization" => "apiKey xxxxxxx"}
}
}

2

Use the format option on the output. Perhaps something like

mutate { add_field => { "[@metadata][payload]" => '[ { "class":"stuff", "details":"more stuff" } ]'

The payload can include sprintf references that add_field will evaluate, so that you can include fields from the event. Then configure the http output with

format => message
message => "%{[@metadata][payload]}"
3

Cool I'll give it a go in the morning, thanks

4

This was perfect ... Thanks so much