Parse / ship JSON file with filebeat

Elastic Stack Beats
2

No, filebeat will just forward lines from files. For parsing it must be used with logstash. You can use json_lines codec in logstash to parse.

In case you have one complete json-object per line you can try in logstash

input {
    beats {
        ...
        codec => "json_lines"
     }
}

See codec documentation

filebeat will follow lines being written. If you want to send your file only once you can try the tcp input plugin in logstash with netcat.

edit: added the missing 's' on json_lines