Output json

[shaharz (Shahar Zion)]

hi,

Im running logstash to collect json log file. the log file contains lines of logs in json format. here is my configuration

input {
file {
codec => "json"
path => "C:\Logs\Client.txt"
path => "C:\Logs\Server.txt"
}
}
filter
{

}
output {
stdout { codec => rubydebug }
elasticsearch {
codec => "json"
hosts => [ "localhost:9200" ]
}
}

now the thing is that to the debug window outputs the json correctly, means it breaks the json to fields as expected. but into the elastic it does not, it stays on the 'message' field as the all json log line

any idea?

thanks !

[magnusbaeck (Magnus Bäck)]

For starters, remove codec => "json" from your elasticsearch output configuration and let's see if that helps.

[shaharz (Shahar Zion)]

Thanks it works, this was the thing