Parse nested json - Logstash v16.2 on Windows 10

Hi guys, I'm trying to import a nested json into Elasticsearch v7.16, but I haven't been successful so far. I managed successfully to import a "normal" (not nested) json, but for the nested one I'm in trouble. Could you please help me?

This is an example of my json:

{
	"header": {
		"institute":"Alpha",
		"location":"USA",
	},
        "product": {
		"code":"A001",
		"price":"12.34",
	},
        "customer": {
		"name":"Mark",
		"age":"24",
	},
}

My pipeline.conf

input {
	file {
		type => "json"
		path => "C:/elastic716/logstash/sz_log/json_real.txt"
		start_position => "beginning"
		sincedb_path => "NULL"
	}
}

filter {
	json{
        source => "message"
    }
}

output {
	stdout {}
}

In this case I would like to see the result with stdout, and the load data on Elasticsearch.

I run it with this command on cmd (logstash/bin folder):

logstash -f pipeline.conf

but I can't see any result:

[INFO ][logstash.agent           ] Pipelines running {:count=>1, :running_pipelines=>[:main], :non_running_pipelines=>[]}

That will persist the in-memory sincedb to a file called NULL in the working directory of logstash. If you do not want the in-memory database persisted across restarts then set it to NUL.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.