# JSON logs not being converted in filebeat/logstash

**URL:** <https://discuss.elastic.co/t/json-logs-not-being-converted-in-filebeat-logstash/100759>\
**Category:** Logstash\
**Created:** [September 16, 2017, 10:35am UTC](https://discuss.elastic.co/t/json-logs-not-being-converted-in-filebeat-logstash/100759 "2017-09-16T10:35:15Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Shubham\_Mahajan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shubham_mahajan/32/22140_2.png) [@Shubham\_Mahajan](https://discuss.elastic.co/u/Shubham_Mahajan)\
**Post date:** [September 16, 2017, 10:35am UTC](https://discuss.elastic.co/t/json-logs-not-being-converted-in-filebeat-logstash/100759/1 "2017-09-16T10:35:15Z")

</div>

{"@timestamp":"2017-08-15T21:30:03.776+00:00","@version":1,"message":"Registry invocation httpStatus: 401 ","logger\_name":"invoker.CloudRegistryInvoker","thread\_name":"http-nio-7010-exec-10","level":"INFO","level\_value":20000,"HOSTNAME":"TANS28","CorrelationId":"eacca7b3e15e2fd","flowId":"READ\_SEAT"}  
{"@timestamp":"2017-08-15T21:30:03.776+00:00","@version":1,"message":"Registry - authorize: 9 ms","logger\_name":"EXT\_SYS\_DURATION\_LOGGER","thread\_name":"http-nio-7010-exec-10","level":"INFO","level\_value":20000,"HOSTNAME":"TANS28","CorrelationId":"eacc82d603e15e2fd","flowId":"WRITE\_SEAT"}

these are the sample logs.

i need to get them as key value in Kibana through logstash and filebeat.

My logstash config:

```
input {
  beats {
     port => 5044
	 codec => "json_lines"
     tags => "JSON"
  }	
}

output {
  elasticsearch {
	hosts => ["http://localhost:9200"] 
	}
  stdout { }
}

```

My Filebeat.yml:

```
filebeat.prospectors:
- paths:
    - \Users\a871nmd\Desktop\ELK\logs\Management.log
  document_type: myapp
  json.keys_under_root: true
  json.add_error_key: true

output.logstash:
  hosts: ['localhost:5044']

```

But still getting logs like this in kibana:

 ![2](https://us1.discourse-cdn.com/elastic/original/3X/8/8/8834368574a03c24eae04a5f04b9035754a35535.png)

Please help. Thanks in advance.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 14, 2017, 10:35am UTC](https://discuss.elastic.co/t/json-logs-not-being-converted-in-filebeat-logstash/100759/2 "2017-10-14T10:35:22Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.