Hi Everyone , I am working on parsing the logs from Azure eventhub to Elasticsearch and trying to use logstash filter for this but getting _jsonparsing error for the logs. the logs structure is someting like below: {"records":[{"key1":"value1","key2":"value2","key3":{"key31":"value31","key32":"va…

[image] vaibhavu: I am trying to parse the Activity Logs Yeah, it is what I thought. My suggestion would be that if is possible you drop Logstash and use the Elastic Agent integration to get those logs. The logs from Activity Logs and Entra ID are pretty bad to parse entirely in logstash, t…

Discuss the Elastic Stack

Logstash not parsing eventhub logs

Elastic Stack Logstash

vaibhavu (Vaibhav Ubale) September 20, 2024, 10:58am 6

Hi @leandrojmp , @Badger ,
Same issue is discussed here in Logstash split filter issue ,and my logs are like same.

Topic		Replies	Views
Handling events after using split Logstash	3	1013	July 6, 2020
Logstash filter for records of nested json messages from eventhub Logstash	3	299	October 20, 2022
How to use nested JSON fields to search for content and drop it Logstash	12	838	August 10, 2021
Logstash filter: copying values after split Logstash	3	294	April 1, 2019
Logstash filter Logstash	4	302	March 10, 2021

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Logstash not parsing eventhub logs

Related topics