Issue with Filebeat and JSON to Kibana

Elastic Stack Beats
1

Hello experts, I am new to this world of ELK and I have already read the documentation but I still do not find the problem ... I am very horrible to write problems, but here I go:

Case:
I have a JSON report (a Behave Test) and I want to send that report to Kibana via filebeat

Version:
filebeat version 7.6.2 (amd64), libbeat 7.6.2

filebeat.yml:

#=========================== Filebeat inputs =============================

filebeat.inputs:

- type: log
  enabled: true

  paths:
    - /var/lib/jenkins/workspace/jsonreport

  json.keys_under_root: true
  json.overwrite_keys: true
  json.add_error_key: true
  json.message_key: log

Results:

Kibana still showing information from the last path i used to use last week, was a .log.

kibana_log

Report Example

[
    {
      "elements": [
        {
          "keyword": "Scenario",
          "location": "Basic.feature:2",
          "name": "A_Scenario",
          "status": "passed",
          "steps": [
            {
              "keyword": "Then",
              "location": "Basic_Tests.feature:3",
              "match": {
                "arguments": [],
                "location": "../behave/steps.py:2"
              },
              "name": "Set Local IP 1",
              "result": {
                "duration": 0.00011992454528808594,
                "status": "passed"
              },
              "step_type": "then"
            },
            {
              "keyword": "Then",
              "location": "Basic_Tests.feature:4",
              "match": {
                "arguments": [],
                "location": "../behave/steps.py:6"
              },
              "name": "Set IP 1",
              "result": {
                "duration": 0.00012803077697753906,
                "status": "passed"
              },
              "step_type": "then"
            }
          ],
          "tags": [],
          "type": "scenario"
        }
      ],
      "keyword": "Feature",
      "location": "Basic_Tests.feature:1",
      "name": "APN-Scenario",
      "status": "passed",
      "tags": []
    }
]

I'm pretty sure I'm skipping some step, or something I need to do with elasticsearch to make it recognize the JSON, but I've searched 3 days in a row and nothing works :frowning:

thanks guys for your time and if i miss some extra information i'll add it as soon as i can.

2

Could you please share a few example reports?

1 Like
3

Actually i dont have any errors or anything ... my issue is that, i'd love have a path error but its like JSON is not compatible or something.

i attached a picture and as you can see still showing me older paths but the new JSON Path still unknown

Edit: Report is attached, sorry i read totally wrong your answer jaja

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.