Json to grok pattern

Elastic Stack Logstash
1

Please asisst, how do i convert a json object to Grok Pattern

2

What does that mean? Perhaps it'll be easier for you to explain if you give an example.

3 
I have a Json Log , i was trying to create a Grok Pattern.

please assist with this config using Filebeat -> Elasticsearch , My Json is not being decomposed.


filebeat.prospectors: 
  - 
    input_type: log
    json.add_error_key: true
    json.keys_under_root: true
    paths: 
      - message.log
output.elasticsearch: 
  hosts: 
    - "http://localhost:9200"
4

Normally one doens't use a grok filter to process JSON logs; you use a json codec or json filter. Individual fields could of course still be processed with grok but that's another matter.

For Filebeat questions please ask in the Filebeat category.

5

Thank you