Logstash parse object

If it is a string rather than an object you could scan for a regexp.