HI All,
We have ingested a json file of data through logstash, now the data has not been properly placed in elasticsearch without this we cant utilize this data to build dashboards in kibana.
JSON file for your reference.
{
"_index": "perflog2",
"_type": "_doc",
"_id": "j_eJuBtAgfD7CrH",
"_version": 1,
"_score": null,
"_source": {
"MEM": [
{
"data": 76.56,
"collection_time": 1566442800
},
{
"data": 76.01,
"collection_time": 1566443100
},
{
"data": 75.95,
"collection_time": 1566443400
}
],
"@timestamp": "2019-08-22T13:35:12.538Z",
"SWAP": [
{
"data": 67.86,
"collection_time": 1566442800
},
{
"data": 67.6,
"collection_time": 1566443100
},
{
"data": 67.69,
"collection_time": 1566443400
}
],
"path": "/opt/curl_output/output.json",
"CPU": [
{
"data": 60.55,
"collection_time": 1566442800
},
{
"data": 35.94,
"collection_time": 1566443100
},
{
"data": 39.46,
"collection_time": 1566443400
}
],
"hostname": "1.1.1.6",
"@version": "1",
"host": "Logstash",
"Filesystem": [
[
{
"d_used_percent": "64.9",
"collection_time": "1566442800",
"index_label": "C:\\"
}
],
[
{
"d_used_percent": "0.6",
"collection_time": "1566442800",
"index_label": "F:\\"
}
],
[
{
"d_used_percent": "27.6",
"collection_time": "1566442800",
"index_label": "D:\\"
}
]
]
},
"fields": {
"@timestamp": [
"2019-08-22T13:35:12.538Z"
]
},
"highlight": {
"hostname.keyword": [
"@kibana-highlighted-field@1.1.1.6@/kibana-highlighted-field@"
]
},
"sort": [
1566480912538
]
}
Basically its the performance data of a host. Can someone help me out on how to format it and make it a meaning full data for kibana visualization.
Thanks
Gauti