Hi, I have the below log after using the JSON filter. I need to take all the fields out of the JSON field "log". For example: instead of all the fields like log.user or log.allow, I need just user or allow. I need to take all the fields out of the JSON "log". "version": 2, "timestamp": "20…

Parse and extract json fields using logstash

Badger May 17, 2020, 11:09pm 2

That is answered here.

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.