JSON KIBANA mapeo de campos

Hola buenas tengo un inconveniente con logstash y kibana.

Estoy intentado tomar campos de un JSON que lo tomo de un input TCP y lo mando a kibana ahora mi inconveniente es a la hora de generar un filtro en “logstash.conf” para que en el area de “Discover” de kibana pueda ver el indice que cree que en este caso se llama Mirth los Fileds correspondientes a mi JSON.

por ejemplo tengo este JSON el mismo es mucho más extenso pero solo me interesa machear los siguientes campos:

{
  "header" : {
    "sendingApplicationNs" : "value",
    "sendingApplicationId" : "value",
    "sendingApplicationIdType" : "value",
    "sendingFacilityNs" : "value",
    "sendingFacilityId" : "value",
    "receivingApplicationNs" : "value",
    "receivingApplicationId" : "value",
    "receivingApplicationIdType" : "value",
    "receivingFacilityNs" : "value",
    "receivingFacilityId" : "value",
    "messageType" : "value",
    "triggerEvent" : "value",
    "messageStructure" : "value"
  }

por ejemplo como debería de construir el filtro para tomar "sendingApplicationId" de mi json y que este aparado se cree en mi kibana como un filed y en el ver el valor que corresponde a "sendingApplicationId" de mi JSON para que me lo muestre en kibana.

input {
  tcp {
    port => 5041
  }
}

filter {
  json {
    source => "message"
    target => "json_fields"
    remove_field => ["message"]
  }

  mutate {
    add_field => {
      "sendingApplicationNs" => "%{[json_fields][header][sendingApplicationNs]}"
      "sendingApplicationId" => "%{[json_fields][header][sendingApplicationId]}"
      "sendingApplicationIdType" => "%{[json_fields][header][sendingApplicationIdType]}"
      "sendingFacilityNs" => "%{[json_fields][header][sendingFacilityNs]}"
    }
  }
}


output {

  elasticsearch {
    hosts => ["http://<ip>:9200"]
        user => elastic
    password => XXXXX
    index => "mirth"
  }
}

intente hacerlo de varias maneras pero no logro este cometido de seleccionar un filed y ver el valor del mismo en kibana para poder graficar

Cual és la salida de Logstash? Necesitas compartir el documento que el Logstash produces.

esta es la salida de: logstash-plain.log

[2023-03-25T18:41:52,442][INFO ][logstash.runner          ] Log4j configuration path used is: /etc/logstash/log4j2.properties
[2023-03-25T18:41:52,469][INFO ][logstash.runner          ] Starting Logstash {"logstash.version"=>"8.6.2", "jruby.version"=>"jruby 9.3.10.0 (2.6.8) 2023-02-01 107b2e6697 OpenJDK 64-Bit Server VM 17.0.6+10 on 17.0.6+10 +indy +jit [x86_64-linux]"}
[2023-03-25T18:41:52,473][INFO ][logstash.runner          ] JVM bootstrap flags: [-Xms1g, -Xmx1g, -Djava.awt.headless=true, -Dfile.encoding=UTF-8, -Djruby.compile.invokedynamic=true, -XX:+HeapDumpOnOutOfMemoryError, -Djava.security.egd=file:/dev/urandom, -Dlog4j2.isThreadContextMapInheritable=true, -Djruby.regexp.interruptible=true, -Djdk.io.File.enableADS=true, --add-exports=jdk.compiler/com.sun.tools.javac.api=ALL-UNNAMED, --add-exports=jdk.compiler/com.sun.tools.javac.file=ALL-UNNAMED, --add-exports=jdk.compiler/com.sun.tools.javac.parser=ALL-UNNAMED, --add-exports=jdk.compiler/com.sun.tools.javac.tree=ALL-UNNAMED, --add-exports=jdk.compiler/com.sun.tools.javac.util=ALL-UNNAMED, --add-opens=java.base/java.security=ALL-UNNAMED, --add-opens=java.base/java.io=ALL-UNNAMED, --add-opens=java.base/java.nio.channels=ALL-UNNAMED, --add-opens=java.base/sun.nio.ch=ALL-UNNAMED, --add-opens=java.management/sun.management=ALL-UNNAMED]
[2023-03-25T18:41:53,298][INFO ][logstash.agent           ] Successfully started Logstash API endpoint {:port=>9600, :ssl_enabled=>false}
[2023-03-25T18:41:53,678][INFO ][org.reflections.Reflections] Reflections took 177 ms to scan 1 urls, producing 127 keys and 444 values
[2023-03-25T18:41:54,144][INFO ][logstash.javapipeline    ] Pipeline `main` is configured with `pipeline.ecs_compatibility: v8` setting. All plugins in this pipeline will default to `ecs_compatibility => v8` unless explicitly configured otherwise.
[2023-03-25T18:41:54,156][INFO ][logstash.outputs.elasticsearch][main] New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>["http://XXXXXXX
[2023-03-25T18:41:54,268][INFO ][logstash.outputs.elasticsearch][main] Elasticsearch pool URLs updated {:changes=>{:removed=>[], :added=>[http://elastic:xxxxxx@XXXXXXX
[2023-03-25T18:41:54,374][WARN ][logstash.outputs.elasticsearch][main] Restored connection to ES instance {:url=>"http://elastic:xxxxxx@XXXXXXX
[2023-03-25T18:41:54,383][INFO ][logstash.outputs.elasticsearch][main] Elasticsearch version determined (8.6.2) {:es_version=>8}
[2023-03-25T18:41:54,383][WARN ][logstash.outputs.elasticsearch][main] Detected a 6.x and above cluster: the `type` event field won't be used to determine the document _type {:es_version=>8}
[2023-03-25T18:41:54,399][INFO ][logstash.outputs.elasticsearch][main] Not eligible for data streams because config contains one or more settings that are not compatible with data streams: {"index"=>"mirth"}
[2023-03-25T18:41:54,399][INFO ][logstash.outputs.elasticsearch][main] Data streams auto configuration (`data_stream => auto` or unset) resolved to `false`
[2023-03-25T18:41:54,403][WARN ][logstash.outputs.elasticsearch][main] Elasticsearch Output configured with `ecs_compatibility => v8`, which resolved to an UNRELEASED preview of version 8.0.0 of the Elastic Common Schema. Once ECS v8 and an updated release of this plugin are publicly available, you will need to update this plugin to resolve this warning.
[2023-03-25T18:41:54,426][INFO ][logstash.outputs.elasticsearch][main] Using a default mapping template {:es_version=>8, :ecs_compatibility=>:v8}
[2023-03-25T18:41:54,429][INFO ][logstash.javapipeline    ][main] Starting pipeline {:pipeline_id=>"main", "pipeline.workers"=>4, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>50, "pipeline.max_inflight"=>500, "pipeline.sources"=>["/etc/logstash/conf.d/logstash-mirth.conf"], :thread=>"#<Thread:0x15975b96@/usr/share/logstash/logstash-core/lib/logstash/java_pipeline.rb:131 run>"}
[2023-03-25T18:41:55,163][INFO ][logstash.javapipeline    ][main] Pipeline Java execution initialization time {"seconds"=>0.73}
[2023-03-25T18:41:55,270][INFO ][logstash.javapipeline    ][main] Pipeline started {"pipeline.id"=>"main"}
[2023-03-25T18:41:55,272][INFO ][logstash.inputs.tcp      ][main][19610e66dab306d8304d0d89afb6c7eb8f6a8d15e252c8c3b89fd910dc6b9dd5] Starting tcp input listener {:address=>"0.0.0.0:5140", :ssl_enable=>false}
[2023-03-25T18:41:55,285][INFO ][logstash.agent           ] Pipelines running {:count=>1, :running_pipelines=>[:main], :non_running_pipelines=>[]}
[2023-03-25T18:43:14,571][WARN ][logstash.filters.json    ][main][760d1e0432eff631d4ca6fb3cf906f5c7b750c629962011fea2fcf11d6ce25a6] Error parsing json {:source=>"message", :raw=>"\u001C\r", :exception=>#<LogStash::Json::ParserError: Illegal character ((CTRL-CHAR, code 28)): only regular white space (\r, \n, \t) is allowed between tokens
 at [Source: (byte[])"\u001C
"; line: 1, column: 2]>}
[2023-03-25T18:43:14,569][WARN ][logstash.filters.json    ][main][760d1e0432eff631d4ca6fb3cf906f5c7b750c629962011fea2fcf11d6ce25a6] Error parsing json {:source=>"message", :raw=>"\v{\"header\":{\"sendingApplicationNs\":\"XXXXX\",\"sendingApplicationId\":null,\"sendingApplicationIdType\":null,\"sendingFacilityNs\":\"32287\",\"sendingFacilityId\":null,\"receivingApplicationNs\":null,\"receivingApplicationId\":null,\"receivingApplicationIdType\":null,\"receivingFacilityNs\":\"32287\",\"receivingFacilityId\":null,\"messageType\":null,\"triggerEvent\":null,\"messageStructure\":null},\"eventType\":null,\"recordedDateTime\":null,\"eventReasonCode\":null,\"tenantId\":\"sis.XXXXXX.local\",\"port\":443,\"comments\":[{\"code\":null,\"comment\":\"neumonia\",\"coding\":null,\"commentType\":\"DG\"}],\"patient\":{\"pin\":\"94340037\",\"chn\":\"9629667\",\"chnList\":null,\"euid\":null,\"docType\":null,\"authority\":\"1.2.3.4.32287.1\",\"patientType\":null,\"name\":\"ZULMA\",\"surname1\":\"QUINTEROS\",\"surname2\":null,\"birthDateTime\":403585200000,\"sexType\":\"F\",\"raceType\":null,\"addressList\":null,\"familyTelephone\":null,\"emailAddress\":\"\",\"contactTelephone\":null,\"maritalStatus\":null,\"religionType\":null,\"ssn\":null,\"chnMother\":null,\"ethnicGroupType\":null,\"birthCountry\":\"DESC\",\"birthState\":\"DESC\",\"birthTown\":null,\"nacionality\":\"DESC\",\"deathDate\":null,\"updateDate\":null,\"patientIdentified\":null,\"deathIdentificator\":null,\"patientState\":null,\"docsType\":null,\"familyTelephone2\":null,\"emailAddress2\":null,\"emailAddressOther\":null,\"contactTelephone2\":null,\"studentIndicator\":null,\"freeAccountNumber\":null,\"popularNumber\":null,\"pincipalContactName\":null,\"pincipalContactSurname1\":null,\"pincipalContactSurname2\":null,\"patientStatus\":null},\"visit\":{\"transId\":null,\"patientClass\":\"E\",\"pointOfCare\":null,\"room\":\"ClínicaMedica\",\"bed\":null,\"assistanceReason\":\"UR\",\"appointmentId\":null,\"admissionDoctorId\":\"23531299\",\"admissionDoctorSurname1\":\"RAMIREZ\",\"admissionDoctorSurname2\":null,\"admissionDoctorName\":\"GINES JOSE MARIA\",\"admissionSection\":\"URG-GEN\",\"episodeSource\":\"ORG1\",\"episodeNumber\":11573560,\"dischargeDisposition\":null,\"dischargeDestination\":null,\"admitDatetime\":1679768940000,\"dischargeDatetime\":null,\"vipPatient\":false,\"clinicalDischargeServiceCod\":null,\"clinicalDischargeServiceDesc\":null,\"clinicalDischargeSectionCod\":null,\"clinicalDischargeSectionDesc\":null,\"clinicalDischargeCenterCod\":null,\"clinicalDischargeCenterDesc\":null,\"urgDischargeDestCod\":\"\",\"urgDischargeDestDesc\":\"\",\"clinicalDischargeDoctor\":\"\",\"urgDischargeReason\":\"\",\"alternateVisitId\":null,\"alternateVisitType\":null,\"sourceEpisodeId\":null,\"admissionCenterId\":null,\"admissionServiceId\":null,\"admissionSectionId\":null},\"orders\":[{\"commonOrder\":{\"orderControl\":\"NW\",\"orderNumber\":\"10977732\",\"orderNum\":\"10977732\",\"barcode\":null,\"quantityTiming\":null,\"orderStatus\":null,\"transDatetime\":1679713200000,\"providerProfId\":\"23531299\",\"providerProfSurname1\":\"RAMIREZ\",\"providerProfSurname2\":null,\"providerProfName\":\"GINES JOSE MARIA\",\"entLocPointOfCare\":null,\"entLocRoom\":\"LABORATORIO\",\"entLocBed\":null,\"enteringOrganizationId\":\"URG-GEN\",\"enteringOrganizationText\":null,\"enteringOrganizationCodingSystem\":\"M\",\"addEnteringOrganizationId\":null,\"addEnteringOrganizationText\":null,\"addEnteringOrganizationCodingSystem\":null,\"service\":\"URG\",\"organizationName\":\"SEDESA\",\"facility\":null,\"organizationId\":\"SEDESA\",\"orderType\":\"E\",\"parentalServiceId\":null,\"parentalServiceText\":null},\"timingQuantity\":null,\"observatioRequest\":{\"orderNumber\":\"10977732\",\"barcode\":null,\"serviceText\":\"GLUCEMIA \",\"num\":null,\"serviceId\":\"660412\",\"alternateServiceId\":\"Laboratorio\",\"alternateServiceText\":\"LABORATORIO\",\"organization\":\"SEDESA\",\"priority\":\"Alta\",\"requestDateTime\":1679779596814,\"observationDateTime\":null,\"relevantClinicalInformation\":\"neumonia\",\"specimenSource\":null,\"orderingProviderId\":null,\"orderingProviderSurname1\":null,\"orderingProviderSurname2\":null,\"orderingProviderName\":null,\"fillerField1\":null,\"timeRelease\":null,\"diagnosticServSectId\":null,\"changeStatusId\":null,\"parentResultIdentifier\":null,\"parentResultText\":null,\"parentResultCodingSystem\":null,\"parentResultSubId\":null,\"parentResultObservationResult\":null,\"startDateTime\":1679713200000,\"reasonForStudyText\":\"\",\"professionalLicenseRelease\":null,\"surnameRelease\":null,\"nameRelease\":null,\"professionalLicense\":null,\"surname\":null,\"name\":null},\"observationResults\":null},{\"commonOrder\":{\"orderControl\":\"NW\",\"orderNumber\":\"10977732\",\"orderNum\":\"10977732\",\"barcode\":null,\"quantityTiming\":null,\"orderStatus\":null,\"transDatetime\":1679713200000,\"providerProfId\":\"23531299\",\"providerProfSurname1\":\"RAMIREZ\",\"providerProfSurname2\":null,\"providerProfName\":\"GINES JOSE MARIA\",\"entLocPointOfCare\":null,\"entLocRoom\":\"LABORATORIO\",\"entLocBed\":null,\"enteringOrganizationId\":\"URG-GEN\",\"enteringOrganizationText\":null,\"enteringOrganizationCodingSystem\":\"M\",\"addEnteringOrganizationId\":null,\"addEnteringOrganizationText\":null,\"addEnteringOrganizationCodingSystem\":null,\"service\":\"URG\",\"organizationName\":\"SEDESA\",\"facility\":null,\"organizationId\":\"SEDESA\",\"orderType\":\"E\",\"parentalServiceId\":null,\"parentalServiceText\":null},\"timingQuantity\":null,\"observatioRequest\":{\"orderNumber\":\"10977732\",\"barcode\":null,\"serviceText\":\"UREA (UREMIA) \",\"num\":null,\"serviceId\":\"660902\",\"alternateServiceId\":\"Laboratorio\",\"alternateServiceText\":\"LABORATORIO\",\"organization\":\"SEDESA\",\"priority\":\"Alta\",\"requestDateTime\":1679779596820,\"observationDateTime\":null,\"relevantClinicalInformation\":\"neumonia\",\"specimenSource\":null,\"orderingProviderId\":null,\"orderingProviderSurname1\":null,\"orderingProviderSurname2\":null,\"orderingProviderName\":null,\"fillerField1\":null,\"timeRelease\":null,\"diagnosticServSectId\":null,\"changeStatusId\":null,\"parentResultIdentifier\":null,\"parentResultText\":null,\"parentResultCodingSystem\":null,\"parentResultSubId\":null,\"parentResultObservationResult\":null,\"startDateTime\":1679713200000,\"reasonForStudyText\":\"\",\"professionalLicenseRelease\":null,\"surnameRelease\":null,\"nameRelease\":null,\"professionalLicense\":null,\"surname\":null,\"name\":null},\"observationResults\":null},{\"commonOrder\":{\"orderControl\":\"NW\",\"orderNumber\":\"10977732\",\"orderNum\":\"10977732\",\"barcode\":null,\"quantityTiming\":null,\"orderStatus\":null,\"transDatetime\":1679713200000,\"providerProfId\":\"23531299\",\"providerProfSurname1\":\"RAMIREZ\",\"providerProfSurname2\":null,\"providerProfName\":\"GINES JOSE MARIA\",\"entLocPointOfCare\":null,\"entLocRoom\":\"LABORATORIO\",\"entLocBed\":null,\"enteringOrganizationId\":\"URG-GEN\",\"enteringOrganizationText\":null,\"enteringOrganizationCodingSystem\":\"M\",\"addEnteringOrganizationId\":null,\"addEnteringOrganizationText\":null,\"addEnteringOrganizationCodingSystem\":null,\"service\":\"URG\",\"organizationName\":\"SEDESA\",\"facility\":null,\"organizationId\":\"SEDESA\",\"orderType\":\"E\",\"parentalServiceId\":null,\"parentalServiceText\":null},\"timingQuantity\":null,\"observatioRequest\":{\"orderNumber\":\"10977732\",\"barcode\":null,\"serviceText\":\"PERFIL GASES VENOSOS + IONOS + LACTICO\",\"num\":null,\"serviceId\":\"770008\",\"alternateServiceId\":\"Laboratorio\",\"alternateServiceText\":\"LABORATORIO\",\"organization\":\"SEDESA\",\"priority\":\"Alta\",\"requestDateTime\":1679779596826,\"observationDateTime\":null,\"relevantClinicalInformation\":\"neumonia\",\"specimenSource\":null,\"orderingProviderId\":null,\"orderingProviderSurname1\":null,\"orderingProviderSurname2\":null,\"orderingProviderName\":null,\"fillerField1\":null,\"timeRelease\":null,\"diagnosticServSectId\":null,\"changeStatusId\":null,\"parentResultIdentifier\":null,\"parentResultText\":null,\"parentResultCodingSystem\":null,\"parentResultSubId\":null,\"parentResultObservationResult\":null,\"startDateTime\":1679713200000,\"reasonForStudyText\":\"\",\"professionalLicenseRelease\":null,\"surnameRelease\":null,\"nameRelease\":null,\"professionalLicense\":null,\"surname\":null,\"name\":null},\"observationResults\":null},{\"commonOrder\":{\"orderControl\":\"NW\",\"orderNumber\":\"10977732\",\"orderNum\":\"10977732\",\"barcode\":null,\"quantityTiming\":null,\"orderStatus\":null,\"transDatetime\":1679713200000,\"providerProfId\":\"23531299\",\"providerProfSurname1\":\"RAMIREZ\",\"providerProfSurname2\":null,\"providerProfName\":\"GINES JOSE MARIA\",\"entLocPointOfCare\":null,\"entLocRoom\":\"LABORATORIO\",\"entLocBed\":null,\"enteringOrganizationId\":\"URG-GEN\",\"enteringOrganizationText\":null,\"enteringOrganizationCodingSystem\":\"M\",\"addEnteringOrganizationId\":null,\"addEnteringOrganizationText\":null,\"addEnteringOrganizationCodingSystem\":null,\"service\":\"URG\",\"organizationName\":\"SEDESA\",\"facility\":null,\"organizationId\":\"SEDESA\",\"orderType\":\"E\",\"parentalServiceId\":null,\"parentalServiceText\":null},\"timingQuantity\":null,\"observatioRequest\":{\"orderNumber\":\"10977732\",\"barcode\":null,\"serviceText\":\"HEMOGRAMA (CITOLOGICO COMPLETO)\",\"num\":null,\"serviceId\":\"660475\",\"alternateServiceId\":\"Laboratorio\",\"alternateServiceText\":\"LABORATORIO\",\"organization\":\"SEDESA\",\"priority\":\"Alta\",\"requestDateTime\":1679779596832,\"observationDateTime\":null,\"relevantClinicalInformation\":\"neumonia\",\"specimenSource\":null,\"orderingProviderId\":null,\"orderingProviderSurname1\":null,\"orderingProviderSurname2\":null,\"orderingProviderName\":null,\"fillerField1\":null,\"timeRelease\":null,\"diagnosticServSectId\":null,\"changeStatusId\":null,\"parentResultIdentifier\":null,\"parentResultText\":null,\"parentResultCodingSystem\":null,\"parentResultSubId\":null,\"parentResultObservationResult\":null,\"startDateTime\":1679713200000,\"reasonForStudyText\":\"\",\"professionalLicenseRelease\":null,\"surnameRelease\":null,\"nameRelease\":null,\"professionalLicense\":null,\"surname\":null,\"name\":null},\"observationResults\":null},{\"commonOrder\":{\"orderControl\":\"NW\",\"orderNumber\":\"10977732\",\"orderNum\":\"10977732\",\"barcode\":null,\"quantityTiming\":null,\"orderStatus\":null,\"transDatetime\":1679713200000,\"providerProfId\":\"23531299\",\"providerProfSurname1\":\"RAMIREZ\",\"providerProfSurname2\":null,\"providerProfName\":\"GINES JOSE MARIA\",\"entLocPointOfCare\":null,\"entLocRoom\":\"LABORATORIO\",\"entLocBed\":null,\"enteringOrganizationId\":\"URG-GEN\",\"enteringOrganizationText\":null,\"enteringOrganizationCodingSystem\":\"M\",\"addEnteringOrganizationId\":null,\"addEnteringOrganizationText\":null,\"addEnteringOrganizationCodingSystem\":null,\"service\":\"URG\",\"organizationName\":\"SEDESA\",\"facility\":null,\"organizationId\":\"SEDESA\",\"orderType\":\"E\",\"parentalServiceId\":null,\"parentalServiceText\":null},\"timingQuantity\":null,\"observatioRequest\":{\"orderNumber\":\"10977732\",\"barcode\":null,\"serviceText\":\"CREATININA \",\"num\":null,\"serviceId\":\"660192\",\"alternateServiceId\":\"Laboratorio\",\"alternateServiceText\":\"LABORATORIO\",\"organization\":\"SEDESA\",\"priority\":\"Alta\",\"requestDateTime\":1679779596837,\"observationDateTime\":null,\"relevantClinicalInformation\":\"neumonia\",\"specimenSource\":null,\"orderingProviderId\":null,\"orderingProviderSurname1\":null,\"orderingProviderSurname2\":null,\"orderingProviderName\":null,\"fillerField1\":null,\"timeRelease\":null,\"diagnosticServSectId\":null,\"changeStatusId\":null,\"parentResultIdentifier\":null,\"parentResultText\":null,\"parentResultCodingSystem\":null,\"parentResultSubId\":null,\"parentResultObservationResult\":null,\"startDateTime\":1679713200000,\"reasonForStudyText\":\"\",\"professionalLicenseRelease\":null,\"surnameRelease\":null,\"nameRelease\":null,\"professionalLicense\":null,\"surname\":null,\"name\":null},\"observationResults\":null}],\"patientInsurance\":[null]}", :exception=>#<LogStash::Json::ParserError: Illegal character ((CTRL-CHAR, code 11)): only regular white space (\r, \n, \t) is allowed between tokens
 at [Source: (byte[])"\u000B{"header":{"sendingApplicationNs":"null","sendingApplicationId":null,"sendingApplicationIdType":null,"sendingFacilityNs":"32287","sendingFacilityId":null,"receivingApplicationNs":null,"receivingApplicationId":null,"receivingApplicationIdType":null,"receivingFacilityNs":"32287","receivingFacilityId":null,"messageType":null,"triggerEvent":null,"messageStructure":null},"eventType":null,"recordedDateTime":null,"eventReasonCode":null,"tenantId":"sis.XXXXXX.local","port":443,"comments":[{"code":nul"[truncated 10409 bytes]; line: 1, column: 2]>}

Tienes un error en su mensaje JSON.

El mensaje tiene un carácter no permitido en el principio.

[2023-03-25T18:43:14,569][WARN ][logstash.filters.json ][main][760d1e0432eff631d4ca6fb3cf906f5c7b750c629962011fea2fcf11d6ce25a6] Error parsing json {:source=>"message", :raw=>"\v{"header":

¿Qué está enviando ese mensaje? Necesitas validar en la origen del mensaje.

Listo ya cambie el Encoding a UTF-8 y no tengo mas el error creo los Fileds bien pero el dato no es correcto :

Por ejemplo:
sendingApplicationNs me deberia de mostrar solo como resultado en este caso EHCOS pero cuando lo busco no me trae nada (como la imagen 2)

y la idea es que trabaje como este otro index que tiene un filed que se llama db_status y me trae el valor que contetiene el mismo:

este es el contenido que veo:

{
  "@timestamp": [
    "2023-03-25T21:43:14.462Z"
  ],
  "@version": [
    "1"
  ],
  "@version.keyword": [
    "1"
  ],
  "event.original": [
    "\u001c\r"
  ],
  "event.original.keyword": [
    "\u001c\r"
  ],
  "message": [
    "\u001c\r"
  ],
  "message.keyword": [
    "\u001c\r"
  ],
  "sendingApplicationId": [
    "%{[json_fields][header][sendingApplicationId]}"
  ],
  "sendingApplicationId.keyword": [
    "%{[json_fields][header][sendingApplicationId]}"
  ],
  "sendingApplicationIdType": [
    "%{[json_fields][header][sendingApplicationIdType]}"
  ],
  "sendingApplicationIdType.keyword": [
    "%{[json_fields][header][sendingApplicationIdType]}"
  ],
  "sendingApplicationNs": [
    "%{[json_fields][header][sendingApplicationNs]}"
  ],
  "sendingApplicationNs.keyword": [
    "%{[json_fields][header][sendingApplicationNs]}"
  ],
  "sendingFacilityNs": [
    "%{[json_fields][header][sendingFacilityNs]}"
  ],
  "sendingFacilityNs.keyword": [
    "%{[json_fields][header][sendingFacilityNs]}"
  ],
  "tags": [
    "_jsonparsefailure"
  ],
  "tags.keyword": [
    "_jsonparsefailure"
  ],
  "_id": "-465GocBs6xamz0nwADY",
  "_index": "mirth",
  "_score": 0.05715841
}

Hola @leandrojmp me podría explicar como tomar los campos que menciono por que intente nuevamente y no lo logro hacer con tal de entender como se hace uno armo el resto pero ese es el tema no consigo de ninguna manera el resultado que busco

Esta es el mensaje que estas recibiendo, esto no es una mensaje json valida, tienes algo que estás enviando estas mensajes.

No está claro cuál es su problema ahora, usted a compartido dos mensajes diferentes, una es un json válido y la otra no es un json válido.

Pregunta independientemente del JSON en correcta la configuración de mi filtro para lograr el cometido que quiero ?

Que básicamente es mapear un dato del json y obtener su valor asi como muestro con el ejemplo de de_status ?

Necesitas compartir el mensaje completa que tienes en Elasticsearch y Kibana, una mensaje onde tienes el campo sendingApplicationNs.

Parece que su filtro json no funciona, en la imagen que has compartido el campo sendingApplicationNs tienes el valor de %{[json_fields][header][sendingApplicationNs]} en una de las mensajes.

Ese es el mensaje completo:

{
  "message": [
    "\u000b{\"header\":{\"sendingApplicationNs\":\"EHCOS\",\"sendingApplicationId\":null,\"sendingApplicationIdType\":null,\"sendingFacilityNs\":\"32287\",\"sendingFacilityId\":null,\"receivingApplicationNs\":null,\"receivingApplicationId\":null,\"receivingApplicationIdType\":null,\"receivingFacilityNs\":\"32287\",\"receivingFacilityId\":null,\"messageType\":null,\"triggerEvent\":null,\"messageStructure\":null},\"eventType\":null,\"recordedDateTime\":null,\"eventReasonCode\":null,\"tenantId\":\"sis.cordoba.local\",\"port\":443,\"comments\":[{\"code\":null,\"comment\":\"CANCER DE PRÓSTATA\",\"coding\":null,\"commentType\":\"DG\"}],\"patient\":{\"pin\":\"7989508\",\"chn\":\"9629590\",\"chnList\":null,\"euid\":null,\"docType\":null,\"authority\":\"1.2.3.4.32287.1\",\"patientType\":null,\"name\":\"PEDRO MARTINIANO\",\"surname1\":\"ALAGASTIN\",\"surname2\":null,\"birthDateTime\":-794523600000,\"sexType\":\"M\",\"raceType\":null,\"addressList\":null,\"familyTelephone\":null,\"emailAddress\":\"\",\"contactTelephone\":null,\"maritalStatus\":null,\"religionType\":null,\"ssn\":null,\"chnMother\":null,\"ethnicGroupType\":null,\"birthCountry\":\"DESC\",\"birthState\":\"DESC\",\"birthTown\":null,\"nacionality\":\"DESC\",\"deathDate\":null,\"updateDate\":null,\"patientIdentified\":null,\"deathIdentificator\":null,\"patientState\":null,\"docsType\":null,\"familyTelephone2\":null,\"emailAddress2\":null,\"emailAddressOther\":null,\"contactTelephone2\":null,\"studentIndicator\":null,\"freeAccountNumber\":null,\"popularNumber\":null,\"pincipalContactName\":null,\"pincipalContactSurname1\":null,\"pincipalContactSurname2\":null,\"patientStatus\":null},\"visit\":{\"transId\":null,\"patientClass\":\"I\",\"pointOfCare\":\"Cirugía General\",\"room\":\"Hab_08\",\"bed\":\"08_A\",\"assistanceReason\":\"inputFromUrg\",\"appointmentId\":null,\"admissionDoctorId\":null,\"admissionDoctorSurname1\":null,\"admissionDoctorSurname2\":null,\"admissionDoctorName\":null,\"admissionSection\":\"Clínica Médica\",\"episodeSource\":\"ORG3\",\"episodeNumber\":11573816,\"dischargeDisposition\":null,\"dischargeDestination\":null,\"admitDatetime\":1679815887994,\"dischargeDatetime\":null,\"vipPatient\":false,\"clinicalDischargeServiceCod\":null,\"clinicalDischargeServiceDesc\":null,\"clinicalDischargeSectionCod\":null,\"clinicalDischargeSectionDesc\":null,\"clinicalDischargeCenterCod\":null,\"clinicalDischargeCenterDesc\":null,\"urgDischargeDestCod\":null,\"urgDischargeDestDesc\":null,\"clinicalDischargeDoctor\":\"\",\"urgDischargeReason\":null,\"alternateVisitId\":null,\"alternateVisitType\":null,\"sourceEpisodeId\":null,\"admissionCenterId\":null,\"admissionServiceId\":null,\"admissionSectionId\":null},\"orders\":[{\"commonOrder\":{\"orderControl\":\"NW\",\"orderNumber\":\"10982172\",\"orderNum\":\"10982172\",\"barcode\":null,\"quantityTiming\":null,\"orderStatus\":null,\"transDatetime\":1679972400000,\"providerProfId\":\"26615985\",\"providerProfSurname1\":\"PANERO\",\"providerProfSurname2\":null,\"providerProfName\":\" Natalia Maria\",\"entLocPointOfCare\":null,\"entLocRoom\":\"LABORATORIO\",\"entLocBed\":null,\"enteringOrganizationId\":\"Clínica Médica\",\"enteringOrganizationText\":null,\"enteringOrganizationCodingSystem\":\"M\",\"addEnteringOrganizationId\":null,\"addEnteringOrganizationText\":null,\"addEnteringOrganizationCodingSystem\":null,\"service\":\"SVCLIMED\",\"organizationName\":\"SEDESA\",\"facility\":null,\"organizationId\":\"SEDESA\",\"orderType\":\"I\",\"parentalServiceId\":null,\"parentalServiceText\":null},\"timingQuantity\":null,\"observatioRequest\":{\"orderNumber\":\"10982172\",\"barcode\":null,\"serviceText\":\"ANTÍGENO PROSTÁTICO ESPECÍFICO TOTAL (PSA) \",\"num\":null,\"serviceId\":\"661000\",\"alternateServiceId\":\"Laboratorio\",\"alternateServiceText\":\"LABORATORIO\",\"organization\":\"SEDESA\",\"priority\":\"Media\",\"requestDateTime\":1679935536364,\"observationDateTime\":null,\"relevantClinicalInformation\":\"CANCER DE PRÓSTATA\",\"specimenSource\":null,\"orderingProviderId\":null,\"orderingProviderSurname1\":null,\"orderingProviderSurname2\":null,\"orderingProviderName\":null,\"fillerField1\":null,\"timeRelease\":null,\"diagnosticServSectId\":null,\"changeStatusId\":null,\"parentResultIdentifier\":null,\"parentResultText\":null,\"parentResultCodingSystem\":null,\"parentResultSubId\":null,\"parentResultObservationResult\":null,\"startDateTime\":1679972400000,\"reasonForStudyText\":\"\",\"professionalLicenseRelease\":null,\"surnameRelease\":null,\"nameRelease\":null,\"professionalLicense\":null,\"surname\":null,\"name\":null},\"observationResults\":null},{\"commonOrder\":{\"orderControl\":\"NW\",\"orderNumber\":\"10982172\",\"orderNum\":\"10982172\",\"barcode\":null,\"quantityTiming\":null,\"orderStatus\":null,\"transDatetime\":1679972400000,\"providerProfId\":\"26615985\",\"providerProfSurname1\":\"PANERO\",\"providerProfSurname2\":null,\"providerProfName\":\" Natalia Maria\",\"entLocPointOfCare\":null,\"entLocRoom\":\"LABORATORIO\",\"entLocBed\":null,\"enteringOrganizationId\":\"Clínica Médica\",\"enteringOrganizationText\":null,\"enteringOrganizationCodingSystem\":\"M\",\"addEnteringOrganizationId\":null,\"addEnteringOrganizationText\":null,\"addEnteringOrganizationCodingSystem\":null,\"service\":\"SVCLIMED\",\"organizationName\":\"SEDESA\",\"facility\":null,\"organizationId\":\"SEDESA\",\"orderType\":\"I\",\"parentalServiceId\":null,\"parentalServiceText\":null},\"timingQuantity\":null,\"observatioRequest\":{\"orderNumber\":\"10982172\",\"barcode\":null,\"serviceText\":\"HIV CON TEST RAPIDO \",\"num\":null,\"serviceId\":\"63HIVTR\",\"alternateServiceId\":\"Laboratorio\",\"alternateServiceText\":\"LABORATORIO\",\"organization\":\"SEDESA\",\"priority\":\"Media\",\"requestDateTime\":1679935536372,\"observationDateTime\":null,\"relevantClinicalInformation\":\"CANCER DE PRÓSTATA\",\"specimenSource\":null,\"orderingProviderId\":null,\"orderingProviderSurname1\":null,\"orderingProviderSurname2\":null,\"orderingProviderName\":null,\"fillerField1\":null,\"timeRelease\":null,\"diagnosticServSectId\":null,\"changeStatusId\":null,\"parentResultIdentifier\":null,\"parentResultText\":null,\"parentResultCodingSystem\":null,\"parentResultSubId\":null,\"parentResultObservationResult\":null,\"startDateTime\":1679972400000,\"reasonForStudyText\":\"\",\"professionalLicenseRelease\":null,\"surnameRelease\":null,\"nameRelease\":null,\"professionalLicense\":null,\"surname\":null,\"name\":null},\"observationResults\":null}],\"patientInsurance\":[{\"insuranceCode\":\"500807\",\"folioInsurance\":\"500807\",\"numberInsuranceType\":\"500807 - INSTITUTO NACIONAL DE SERVICIOS SOCIALES PARA JUBILADOS Y PENSIONADOS\",\"planName\":\"PLAN UNICO \"}]}"
  ],
  "message.keyword": [
    "\u000b{\"header\":{\"sendingApplicationNs\":\"EHCOS\",\"sendingApplicationId\":null,\"sendingApplicationIdType\":null,\"sendingFacilityNs\":\"32287\",\"sendingFacilityId\":null,\"receivingApplicationNs\":null,\"receivingApplicationId\":null,\"receivingApplicationIdType\":null,\"receivingFacilityNs\":\"32287\",\"receivingFacilityId\":null,\"messageType\":null,\"triggerEvent\":null,\"messageStructure\":null},\"eventType\":null,\"recordedDateTime\":null,\"eventReasonCode\":null,\"tenantId\":\"test\",\"port\":443,\"comments\":[{\"code\":null,\"comment\":\"CANCER DE PRÓSTATA\",\"coding\":null,\"commentType\":\"DG\"}],\"patient\":{\"pin\":\"7989508\",\"chn\":\"9629590\",\"chnList\":null,\"euid\":null,\"docType\":null,\"authority\":\"1.2.3.4.32287.1\",\"patientType\":null,\"name\":\"PEDRO MARTINIANO\",\"surname1\":\"ALAGASTIN\",\"surname2\":null,\"birthDateTime\":-794523600000,\"sexType\":\"M\",\"raceType\":null,\"addressList\":null,\"familyTelephone\":null,\"emailAddress\":\"\",\"contactTelephone\":null,\"maritalStatus\":null,\"religionType\":null,\"ssn\":null,\"chnMother\":null,\"ethnicGroupType\":null,\"birthCountry\":\"DESC\",\"birthState\":\"DESC\",\"birthTown\":null,\"nacionality\":\"DESC\",\"deathDate\":null,\"updateDate\":null,\"patientIdentified\":null,\"deathIdentificator\":null,\"patientState\":null,\"docsType\":null,\"familyTelephone2\":null,\"emailAddress2\":null,\"emailAddressOther\":null,\"contactTelephone2\":null,\"studentIndicator\":null,\"freeAccountNumber\":null,\"popularNumber\":null,\"pincipalContactName\":null,\"pincipalContactSurname1\":null,\"pincipalContactSurname2\":null,\"patientStatus\":null},\"visit\":{\"transId\":null,\"patientClass\":\"I\",\"pointOfCare\":\"Cirugía General\",\"room\":\"Hab_08\",\"bed\":\"08_A\",\"assistanceReason\":\"inputFromUrg\",\"appointmentId\":null,\"admissionDoctorId\":null,\"admissionDoctorSurname1\":null,\"admissionDoctorSurname2\":null,\"admissionDoctorName\":null,\"admissionSection\":\"Clínica Médica\",\"episodeSource\":\"ORG3\",\"episodeNumber\":11573816,\"dischargeDisposition\":null,\"dischargeDestination\":null,\"admitDatetime\":1679815887994,\"dischargeDatetime\":null,\"vipPatient\":false,\"clinicalDischargeServiceCod\":null,\"clinicalDischargeServiceDesc\":null,\"clinicalDischargeSectionCod\":null,\"clinicalDischargeSectionDesc\":null,\"clinicalDischargeCenterCod\":null,\"clinicalDischargeCenterDesc\":null,\"urgDischargeDestCod\":null,\"urgDischargeDestDesc\":null,\"clinicalDischargeDoctor\":\"\",\"urgDischargeReason\":null,\"alternateVisitId\":null,\"alternateVisitType\":null,\"sourceEpisodeId\":null,\"admissionCenterId\":null,\"admissionServiceId\":null,\"admissionSectionId\":null},\"orders\":[{\"commonOrder\":{\"orderControl\":\"NW\",\"orderNumber\":\"10982172\",\"orderNum\":\"10982172\",\"barcode\":null,\"quantityTiming\":null,\"orderStatus\":null,\"transDatetime\":1679972400000,\"providerProfId\":\"26615985\",\"providerProfSurname1\":\"PANERO\",\"providerProfSurname2\":null,\"providerProfName\":\" Natalia Maria\",\"entLocPointOfCare\":null,\"entLocRoom\":\"LABORATORIO\",\"entLocBed\":null,\"enteringOrganizationId\":\"Clínica Médica\",\"enteringOrganizationText\":null,\"enteringOrganizationCodingSystem\":\"M\",\"addEnteringOrganizationId\":null,\"addEnteringOrganizationText\":null,\"addEnteringOrganizationCodingSystem\":null,\"service\":\"SVCLIMED\",\"organizationName\":\"SEDESA\",\"facility\":null,\"organizationId\":\"SEDESA\",\"orderType\":\"I\",\"parentalServiceId\":null,\"parentalServiceText\":null},\"timingQuantity\":null,\"observatioRequest\":{\"orderNumber\":\"10982172\",\"barcode\":null,\"serviceText\":\"ANTÍGENO PROSTÁTICO ESPECÍFICO TOTAL (PSA) \",\"num\":null,\"serviceId\":\"661000\",\"alternateServiceId\":\"Laboratorio\",\"alternateServiceText\":\"LABORATORIO\",\"organization\":\"SEDESA\",\"priority\":\"Media\",\"requestDateTime\":1679935536364,\"observationDateTime\":null,\"relevantClinicalInformation\":\"null\",\"specimenSource\":null,\"orderingProviderId\":null,\"orderingProviderSurname1\":null,\"orderingProviderSurname2\":null,\"orderingProviderName\":null,\"fillerField1\":null,\"timeRelease\":null,\"diagnosticServSectId\":null,\"changeStatusId\":null,\"parentResultIdentifier\":null,\"parentResultText\":null,\"parentResultCodingSystem\":null,\"parentResultSubId\":null,\"parentResultObservationResult\":null,\"startDateTime\":1679972400000,\"reasonForStudyText\":\"\",\"professionalLicenseRelease\":null,\"surnameRelease\":null,\"nameRelease\":null,\"professionalLicense\":null,\"surname\":null,\"name\":null},\"observationResults\":null},{\"commonOrder\":{\"orderControl\":\"NW\",\"orderNumber\":\"10982172\",\"orderNum\":\"10982172\",\"barcode\":null,\"quantityTiming\":null,\"orderStatus\":null,\"transDatetime\":1679972400000,\"providerProfId\":\"26615985\",\"providerProfSurname1\":\"PANERO\",\"providerProfSurname2\":null,\"providerProfName\":\" Natalia Maria\",\"entLocPointOfCare\":null,\"entLocRoom\":\"LABORATORIO\",\"entLocBed\":null,\"enteringOrganizationId\":\"Clínica Médica\",\"enteringOrganizationText\":null,\"enteringOrganizationCodingSystem\":\"M\",\"addEnteringOrganizationId\":null,\"addEnteringOrganizationText\":null,\"addEnteringOrganizationCodingSystem\":null,\"service\":\"SVCLIMED\",\"organizationName\":\"SEDESA\",\"facility\":null,\"organizationId\":\"SEDESA\",\"orderType\":\"I\",\"parentalServiceId\":null,\"parentalServiceText\":null},\"timingQuantity\":null,\"observatioRequest\":{\"orderNumber\":\"10982172\",\"barcode\":null,\"serviceText\":\"null \",\"num\":null,\"serviceId\":\"63HIVTR\",\"alternateServiceId\":\"Laboratorio\",\"alternateServiceText\":\"LABORATORIO\",\"organization\":\"SEDESA\",\"priority\":\"Media\",\"requestDateTime\":1679935536372,\"observationDateTime\":null,\"relevantClinicalInformation\":\"null\",\"specimenSource\":null,\"orderingProviderId\":null,\"orderingProviderSurname1\":null,\"orderingProviderSurname2\":null,\"orderingProviderName\":null,\"fillerField1\":null,\"timeRelease\":null,\"diagnosticServSectId\":null,\"changeStatusId\":null,\"parentResultIdentifier\":null,\"parentResultText\":null,\"parentResultCodingSystem\":null,\"parentResultSubId\":null,\"parentResultObservationResult\":null,\"startDateTime\":1679972400000,\"reasonForStudyText\":\"\",\"professionalLicenseRelease\":null,\"surnameRelease\":null,\"nameRelease\":null,\"professionalLicense\":null,\"surname\":null,\"name\":null},\"observationResults\":null}],\"patientInsurance\":[{\"insuranceCode\":\"500807\",\"folioInsurance\":\"500807\",\"numberInsuranceType\":\"500807 - INSTITUTO NACIONAL DE SERVICIOS SOCIALES PARA JUBILADOS Y PENSIONADOS\",\"planName\":\"PLAN UNICO \"}]}"
  ],
  "receivingFacilityNs": [
    "%{[header][receivingFacilityNs]}"
  ],
  "receivingFacilityNs.keyword": [
    "%{[header][receivingFacilityNs]}"
  ],
  "sendingApplicationNs": [
    "%{[header][sendingApplicationNs]}"
  ],
  "sendingApplicationNs.keyword": [
    "%{[header][sendingApplicationNs]}"
  ],
  "sendingFacilityNs": [
    "%{[header][sendingFacilityNs]}"
  ],
  "sendingFacilityNs.keyword": [
    "%{[header][sendingFacilityNs]}"
  ],
  "tags": [
    "_jsonparsefailure"
  ],
  "tags.keyword": [
    "_jsonparsefailure"
  ],
  "_id": "UqADJIcBVQHCNpRd5Hi6",
  "_index": "mirth",
  "_score": 1
}

JSON Oiginal:

type or paste {
  "header" : {
    "sendingApplicationNs" : "EHCOS",
    "sendingApplicationId" : null,
    "sendingApplicationIdType" : null,
    "sendingFacilityNs" : "32287",
    "sendingFacilityId" : null,
    "receivingApplicationNs" : null,
    "receivingApplicationId" : null,
    "receivingApplicationIdType" : null,
    "receivingFacilityNs" : "32287",
    "receivingFacilityId" : null,
    "messageType" : null,
    "triggerEvent" : null,
    "messageStructure" : null
  },
  "eventType" : null,
  "recordedDateTime" : null,
  "eventReasonCode" : null,
  "tenantId" : "sis.cordoba.local",
  "port" : 443,
  "comments" : [
    {
      "code" : null,
      "comment" : "null",
      "coding" : null,
      "commentType" : "DG"
    }
  ],
  "patient" : {
    "pin" : "7989508",
    "chn" : "9629590",
    "chnList" : null,
    "euid" : null,
    "docType" : null,
    "authority" : "1.2.3.4.32287.1",
    "patientType" : null,
    "name" : "PEDRO MARTINIANO",
    "surname1" : "ALAGASTIN",
    "surname2" : null,
    "birthDateTime" : -794523600000,
    "sexType" : "M",
    "raceType" : null,
    "addressList" : null,
    "familyTelephone" : null,
    "emailAddress" : "",
    "contactTelephone" : null,
    "maritalStatus" : null,
    "religionType" : null,
    "ssn" : null,
    "chnMother" : null,
    "ethnicGroupType" : null,
    "birthCountry" : "DESC",
    "birthState" : "DESC",
    "birthTown" : null,
    "nacionality" : "DESC",
    "deathDate" : null,
    "updateDate" : null,
    "patientIdentified" : null,
    "deathIdentificator" : null,
    "patientState" : null,
    "docsType" : null,
    "familyTelephone2" : null,
    "emailAddress2" : null,
    "emailAddressOther" : null,
    "contactTelephone2" : null,
    "studentIndicator" : null,
    "freeAccountNumber" : null,
    "popularNumber" : null,
    "pincipalContactName" : null,
    "pincipalContactSurname1" : null,
    "pincipalContactSurname2" : null,
    "patientStatus" : null
  },
  "visit" : {
    "transId" : null,
    "patientClass" : "I",
    "pointOfCare" : "Cirugía General",
    "room" : "Hab_08",
    "bed" : "08_A",
    "assistanceReason" : "inputFromUrg",
    "appointmentId" : null,
    "admissionDoctorId" : null,
    "admissionDoctorSurname1" : null,
    "admissionDoctorSurname2" : null,
    "admissionDoctorName" : null,
    "admissionSection" : "Clínica Médica",
    "episodeSource" : "ORG3",
    "episodeNumber" : 11573816,
    "dischargeDisposition" : null,
    "dischargeDestination" : null,
    "admitDatetime" : 1679815887994,
    "dischargeDatetime" : null,
    "vipPatient" : false,
    "clinicalDischargeServiceCod" : null,
    "clinicalDischargeServiceDesc" : null,
    "clinicalDischargeSectionCod" : null,
    "clinicalDischargeSectionDesc" : null,
    "clinicalDischargeCenterCod" : null,
    "clinicalDischargeCenterDesc" : null,
    "urgDischargeDestCod" : null,
    "urgDischargeDestDesc" : null,
    "clinicalDischargeDoctor" : "",
    "urgDischargeReason" : null,
    "alternateVisitId" : null,
    "alternateVisitType" : null,
    "sourceEpisodeId" : null,
    "admissionCenterId" : null,
    "admissionServiceId" : null,
    "admissionSectionId" : null
  },
  "orders" : [
    {
      "commonOrder" : {
        "orderControl" : "NW",
        "orderNumber" : "10982172",
        "orderNum" : "10982172",
        "barcode" : null,
        "quantityTiming" : null,
        "orderStatus" : null,
        "transDatetime" : 1679972400000,
        "providerProfId" : "26615985",
        "providerProfSurname1" : "PANERO",
        "providerProfSurname2" : null,
        "providerProfName" : " Natalia Maria",
        "entLocPointOfCare" : null,
        "entLocRoom" : "LABORATORIO",
        "entLocBed" : null,
        "enteringOrganizationId" : "Clínica Médica",
        "enteringOrganizationText" : null,
        "enteringOrganizationCodingSystem" : "M",
        "addEnteringOrganizationId" : null,
        "addEnteringOrganizationText" : null,
        "addEnteringOrganizationCodingSystem" : null,
        "service" : "SVCLIMED",
        "organizationName" : "SEDESA",
        "facility" : null,
        "organizationId" : "SEDESA",
        "orderType" : "I",
        "parentalServiceId" : null,
        "parentalServiceText" : null
      },
      "timingQuantity" : null,
      "observatioRequest" : {
        "orderNumber" : "10982172",
        "barcode" : null,
        "serviceText" : "ANTÍGENO PROSTÁTICO ESPECÍFICO TOTAL (PSA) ",
        "num" : null,
        "serviceId" : "661000",
        "alternateServiceId" : "Laboratorio",
        "alternateServiceText" : "LABORATORIO",
        "organization" : "SEDESA",
        "priority" : "Media",
        "requestDateTime" : 1679935536364,
        "observationDateTime" : null,
        "relevantClinicalInformation" : null",
        "specimenSource" : null,
        "orderingProviderId" : null,
        "orderingProviderSurname1" : null,
        "orderingProviderSurname2" : null,
        "orderingProviderName" : null,
        "fillerField1" : null,
        "timeRelease" : null,
        "diagnosticServSectId" : null,
        "changeStatusId" : null,
        "parentResultIdentifier" : null,
        "parentResultText" : null,
        "parentResultCodingSystem" : null,
        "parentResultSubId" : null,
        "parentResultObservationResult" : null,
        "startDateTime" : 1679972400000,
        "reasonForStudyText" : "",
        "professionalLicenseRelease" : null,
        "surnameRelease" : null,
        "nameRelease" : null,
        "professionalLicense" : null,
        "surname" : null,
        "name" : null
      },
      "observationResults" : null
    },
    {
      "commonOrder" : {
        "orderControl" : "NW",
        "orderNumber" : "10982172",
        "orderNum" : "10982172",
        "barcode" : null,
        "quantityTiming" : null,
        "orderStatus" : null,
        "transDatetime" : 1679972400000,
        "providerProfId" : "26615985",
        "providerProfSurname1" : "PANERO",
        "providerProfSurname2" : null,
        "providerProfName" : " Natalia Maria",
        "entLocPointOfCare" : null,
        "entLocRoom" : "LABORATORIO",
        "entLocBed" : null,
        "enteringOrganizationId" : "Clínica Médica",
        "enteringOrganizationText" : null,
        "enteringOrganizationCodingSystem" : "M",
        "addEnteringOrganizationId" : null,
        "addEnteringOrganizationText" : null,
        "addEnteringOrganizationCodingSystem" : null,
        "service" : "SVCLIMED",
        "organizationName" : "SEDESA",
        "facility" : null,
        "organizationId" : "SEDESA",
        "orderType" : "I",
        "parentalServiceId" : null,
        "parentalServiceText" : null
      },
      "timingQuantity" : null,
      "observatioRequest" : {
        "orderNumber" : "10982172",
        "barcode" : null,
        "serviceText" : "null",
        "num" : null,
        "serviceId" : "63HIVTR",
        "alternateServiceId" : "Laboratorio",
        "alternateServiceText" : "LABORATORIO",
        "organization" : "SEDESA",
        "priority" : "Media",
        "requestDateTime" : 1679935536372,
        "observationDateTime" : null,
        "relevantClinicalInformation" : "CANCER DE PRÓSTATA",
        "specimenSource" : null,
        "orderingProviderId" : null,
        "orderingProviderSurname1" : null,
        "orderingProviderSurname2" : null,
        "orderingProviderName" : null,
        "fillerField1" : null,
        "timeRelease" : null,
        "diagnosticServSectId" : null,
        "changeStatusId" : null,
        "parentResultIdentifier" : null,
        "parentResultText" : null,
        "parentResultCodingSystem" : null,
        "parentResultSubId" : null,
        "parentResultObservationResult" : null,
        "startDateTime" : 1679972400000,
        "reasonForStudyText" : "",
        "professionalLicenseRelease" : null,
        "surnameRelease" : null,
        "nameRelease" : null,
        "professionalLicense" : null,
        "surname" : null,
        "name" : null
      },
      "observationResults" : null
    }
  ],
  "patientInsurance" : [
    {
      "insuranceCode" : "500807",
      "folioInsurance" : "500807",
      "numberInsuranceType" : "500807 - INSTITUTO NACIONAL DE SERVICIOS SOCIALES PARA JUBILADOS Y PENSIONADOS",
      "planName" : "PLAN UNICO "
    }
  ]
}code here

Tienes un error en el filtro json, es el mismo error desta mensaje.

Tu mensaje no es un Json valido, tienes que validar en la origen del mensaje, no puedea tener estos caracteres \u000b en el inicio.

(Same answer in english because my english is a little better than my spanish.

You have an error in your message, it is not a valid json, it has some characters in the beginning, so your json filter will not work, you need to check and fix this in the source)

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.