Json to grok pattern

Please asisst, how do i convert a json object to Grok Pattern

What does that mean? Perhaps it'll be easier for you to explain if you give an example.

I have a Json Log , i was trying to create a Grok Pattern.

please assist with this config using Filebeat -> Elasticsearch , My Json is not being decomposed.

    input_type: log
    json.add_error_key: true
    json.keys_under_root: true
      - message.log
    - "http://localhost:9200"

Normally one doens't use a grok filter to process JSON logs; you use a json codec or json filter. Individual fields could of course still be processed with grok but that's another matter.

For Filebeat questions please ask in the Filebeat category.

Thank you

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.