Logstash parse Array of objects

Elastic Stack Logstash
1

Hello,

I'm having some issues with creating a proper logstash config that could parse an array of objects.

I have the example data source as example:

[
{
"id": 666,
"time": 1561938911000,
"view": {
"current": {
"name": "Alert1"
}
},
"description": [
{
"asset": {
"hostname": "machine10",
"ip": "10.0.0.10",
"class": "desktop",
"login": [
"admin",
"john"
]
}
}
],
"level": 0.147
}
]

I tried using codec => json and split {} but I still getting "incompatible json object". Any suggestion or what I could be trying here ?
Thanks!

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.