JSON Input showing up line by line

Elastic Stack Beats
1

Hi,

I have a JSON file that I want to read and send to logstash. Each json entry is "pretty printed" (with lines). When this is fed to logstash, each line is a new event. ie. There are events with the following:

{
     "message": "       }"
...
}

How can I make filebeat take a json object from the file and feed it into logstash. I have tried with a "json" input codec but I am not sure which "side" of the transaction we must specify as json.

Any help is appreciated,
Thanks

2

See this issue. You can combine mutliline with the decode_json_fields to accomplish this.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.