Parse Json Array

Trying to parse a Json array like this message


I Would like to get Two different documents and can make it happens using below config using the cli and manually inputting the log

input {
stdin {
codec => "json"
filter {
split { }

output {
stdout {
codec => rubydebug

Im actually receiving that log from filebeat, I tried to use "codec => json" in the input "beats" but cant get the same results using the "split" in filter and indexing in Elasticsearch


Manage to got it working creating another beats input with json codec in another port.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.