# Issue in parsing JSON data

**URL:** https://discuss.elastic.co/t/issue-in-parsing-json-data/316210
**Category:** Logstash
**Created:** [October 10, 2022, 11:23am UTC](https://discuss.elastic.co/t/issue-in-parsing-json-data/316210 "2022-10-10T11:23:31Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Aniket\_Pant](https://avatars.discourse-cdn.com/v4/letter/a/77aa72/32.png) [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)
#### Post date: [October 10, 2022, 11:23am UTC](https://discuss.elastic.co/t/issue-in-parsing-json-data/316210/1 "2022-10-10T11:23:31Z")

</div>

**Sample Logs**

```auto
[{
"Name":"abc",
"Phone_no":"9877231",
"Gender":"M"
}
]

```

I am getting data from filebeat

```auto
- paths:
    - /root/test.log
  fields: {log_type: json-multiline}
  multiline.type: pattern
  multiline.pattern: '^\[{'
  multiline.negate: true
  multiline.match: after

```

And sending to logstash

```auto
filter {
json {
source => "message" 
}
}

```

we want to extract field from json but it not working,

---

<div class="post-metadata">

### Author: ![Aniket\_Pant](https://avatars.discourse-cdn.com/v4/letter/a/77aa72/32.png) [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)
#### Post date: [October 11, 2022, 12:06pm UTC](https://discuss.elastic.co/t/issue-in-parsing-json-data/316210/2 "2022-10-11T12:06:10Z")

</div>

It is solved by making change in pipelines

```auto
filter {
grok {
message => ["\[%{GREEDYDATA:msg}\]"]
}
mutate {
gsub => ["msg" , "\n", ""]
}
json {
source => "msg" 
}
}

```

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 8, 2022, 12:06pm UTC](https://discuss.elastic.co/t/issue-in-parsing-json-data/316210/3 "2022-11-08T12:06:49Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.