I have a JSON log of my application which contains elements in a nested array form, here is the sample of it:- { "msgs": [ { "ts": "2017-09-04T07:07:46.37098Z", "tid": 25, "lvl": "Information", "cat": "NCR.CP.GatewayService.TransactionProcessingEngine", …

i have used: split{ field=>"[doc][msgs]" } and This worked, as it created event for each element in array, so whether element would exists or not a field would be created in kibana and the value will be null if elements doesn't exists and a value will be there if element exists. This i…

Discuss the Elastic Stack

Logstash nested array JSON parsing

Elastic Stack Logstash

aditya_soni (Aditya Soni) September 22, 2017, 8:49am 15

ok thanks @guyboertje

Topic		Replies	Views
Logstash failing to parse json Logstash	21	2416	July 6, 2017
Parsing json with delimiters using logstash Logstash	24	6280	July 6, 2017
Logstash-elastic do not support array based columns? Logstash	15	1856	October 23, 2017
Json array splitting in logstash Logstash	11	5946	May 11, 2017
Parsing Nested JSON with Array Logstash	17	1328	September 3, 2020

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Logstash nested array JSON parsing

Related topics