Indexing Json file


I'm trying to parse JSON file with logstash. In kibana I see the field "counters" of my JSON file like that :

What i'm interested in is to get the "tele" in the "sdn" attribute

I tried to do a conf file like that :

input {
beats {
port=> 5044
json {
source => "message"
split { field => "[counters]" }

if "tele" in [counters][sdn]{
mutate{add_field=>["VNFc", "tele"]
action => "index"
hosts => ["localhost:9200"]
index => "test-%{+YYYY.MM.dd}"
}stdout {}

Thanks a lot (i'm new to ELK :grimacing: )

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.