Hello!
I need help in parsing some json array logs.
I have logs like
[{
"actionId": "bf727a6a-9d8a-4a35-852b-7bfb9d69dc60",
"actionName": "Report build started",
"timestamp": "10.03.2016 00:17:57.426",
"data": {
"sessionId": "0a048bb7-a8c2-48cd-a1ac-7c2d8384d628",
"requestTimestamp": "10.03.2016 00:17:57.426",
"targetCount": 1,
"targetType": "object",
"targetCardinality": "by one",
"dataSource": "unknown",
"begin": "09.03.2016 08:00:00.000",
"end": "10.03.2016 08:00:00.000",
"beginUtc": "09.03.2016 00:00:00.000",
"endUtc": "10.03.2016 00:00:00.000",
"reportTypeId": "22111ab1-fdfe-4d91-9a36-5f3704ea30dd",
"reportName": "somereportname"
},
"user": {
"login": "Somelogin",
"accountLogin": "Somelogin",
"accountId": 738185,
"accountName": "somename",
"olsonId": "Asia/Irkutsk",
"utcOffset": "+08:00"
}
},
{
"actionId": "bf727a6a-9d8a-4a35-852b-7bfb9d69dc60",
"actionName": "Report build started",
"timestamp": "10.03.2016 00:17:57.426",
"data": {
"sessionId": "0a048bb7-a8c2-48cd-a1ac-7c2d8384d628",
"requestTimestamp": "10.03.2016 00:17:57.426",
"targetCount": 1,
"targetType": "object",
"targetCardinality": "by one",
"dataSource": "unknown",
"begin": "09.03.2016 08:00:00.000",
"end": "10.03.2016 08:00:00.000",
"beginUtc": "09.03.2016 00:00:00.000",
"endUtc": "10.03.2016 00:00:00.000",
"reportTypeId": "22111ab1-fdfe-4d91-9a36-5f3704ea30dd",
"reportName": "somereportname"
},
"user": {
"login": "Somelogin",
"accountLogin": "Somelogin",
"accountId": 738185,
"accountName": "somename",
"olsonId": "Asia/Irkutsk",
"utcOffset": "+08:00"
}
}]
And i want them to be parsed by logstash, but cannout understand how.