Hello; I have this logstash.conf file: input { exec { command => "python3 news.py" interval => 30 codec => "json" } } output { stdout { } } without the code => json I obtain this result: "message" => " {\n "authors": ,\n "id": "1",\n "publish_date": "2020-10-16 23:01:45+00:00"…

Indeed, the codec will just consume the first JSON object. You could try # Remove newlines, because mutate+split will not match them mutate { gsub => [ "message", "\n", "" ] } # This removes the "}{" mutate { split => { "message" => "}{" } } split { field => "message" } # Ad…

Discuss the Elastic Stack

Logstash json line by line

Elastic Stack Logstash

Didi_Sisi (Didi Sisi) November 29, 2020, 9:04am 3

Thank you, please, where to add this code in the Filter {}?

Topic		Replies	Views
Filebeats input json_lines only processing single entry Logstash	3	1888	November 19, 2018
Logstash does nothing for valid json input Logstash	9	2119	April 4, 2017
Output -> file -> codec -> json writing in a single line instead of writing as new line for every set Logstash	3	2451	December 7, 2016
Parse json file with logstash Logstash	6	8141	July 9, 2018
How to parse the json string Logstash	2	322	January 3, 2021

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Logstash json line by line

Related topics