Hi, I have a program which sends its JSON data via Syslog. Example: Jul 7 14:17:48 10.1.1.221 suricata[28230]: {"timestamp":"2016-07-07T14:19:52.081015+0000",..."} input { file { type => "syslog" path => [ "/var/log/foo/suricata.log" …

Parse JSON string contained in a Syslog message

norandom (Norandom) July 7, 2016, 2:57pm 3

That was the issue. Thank you

Topic		Replies	Views
SYSLOG, convert string message to JSON format Logstash	9	9810	March 18, 2020
Logstash JSON syslog_message parsing Logstash	3	1530	March 23, 2017
Parsing issues of JSON within a syslog event Logstash	1	642	December 29, 2018
Problem with parsing json in syslog format Logstash	5	1422	November 18, 2020
Grok filter help Logstash	5	1375	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Parse JSON string contained in a Syslog message

Related topics