Limit json nested level parse


(Matteo) #1

Hi all,
i've a log like this :
log: "{
"time": 1539591679770,
"msg": "Connection is OK.",
"checkCompleteInfo": {
"details": "12345",
"value" : 2
}
}"

After applying json filter to the log field, all the fields are extracted ( also details inside the checkCompleteInfo).
There's a way to configure logtsash json filter to define the level of parsing?
I want to extract as fields only the first json level , so

  • "Time": "1539591679770"
  • "msg": "Connection is OK."
  • "checkCompleteInfo" : " "details"": "12345","value":2"

and not

  • "Time": "1539591679770"
  • "msg": "Connection is OK."
  • "checkCompleteInfo.details" : "12345"
  • "checkCompleteInfo.value" : "2"

Thanks


(system) #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.