JSON Input showing up line by line

(Cónall Prendergast) #1


I have a JSON file that I want to read and send to logstash. Each json entry is "pretty printed" (with lines). When this is fed to logstash, each line is a new event. ie. There are events with the following:

     "message": "       }"

How can I make filebeat take a json object from the file and feed it into logstash. I have tried with a "json" input codec but I am not sure which "side" of the transaction we must specify as json.

Any help is appreciated,

(Andrew Kroh) #2

See this issue. You can combine mutliline with the decode_json_fields to accomplish this.

(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.