Hello, I'm new to Logstash and was wondering if someone could help with my filter and how can I parse the rest of my json fields the intent is to bring out the other fields in "message" such that I can map them to ECS: here is what I have for my filter: filter { if "redacted_platform" in [ls-sou…

Json { source => "message" } not parsing all of it

itschobot (Xavier) February 22, 2022, 8:47pm 22

sounds good, I appreciate it and again thank you!

Topic		Replies	Views
How to use the JSON filter correctly? Logstash	14	4197	August 25, 2023
I am unable to parse certain JSON messages Logstash	7	917	May 3, 2020
How to remove original message field after parsing using json filter Logstash	2	3343	June 3, 2021
How to parse json inside text line Logstash	18	4126	November 7, 2019
Filter individual json fields using json filters Logstash	17	1591	December 28, 2020

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Json { source => "message" } not parsing all of it

Related topics