I have a problem trying to parse a log file with backslashes in it. I have tried a number of escape options using the gsub() method although without any luck. I am not a ruby coder so its possible i am doing something simple but wrong. [2017-02-06T11:21:45,716][ERROR][logstash.codecs.json ] J…

Analyse what failed, maybe the regex pattern can be improved. But failing that, yes, you can try one JSON filter first then have a conditional block that does the replace and second JSON filter. The conditional will test tags having a _jsonparsefailureentry, e.g. ... JSON filter 1 ... if "…

Discuss the Elastic Stack

Logstash json parse error

Elastic Stack Logstash

mattgolding February 8, 2017, 3:48am 9

The logs are generated by a third party app in json format.

Topic		Replies	Views
Logstash - json filter removes backslash Logstash	5	1040	February 13, 2019
Logstash adding unwanted \ \ to field name Logstash	6	1174	April 25, 2018
How to gsub \ in json message Logstash	13	3789	July 15, 2019
Pre-process message backslashes prior to JSON filter Logstash	4	1537	March 26, 2019
Gsub backslash escape and continue when error Logstash	2	512	November 24, 2020

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Logstash json parse error

Related topics