I'm trying to parse parsedmarc json files. These log files contain a single array with multiple records. I've taken the json and am testing with a single record, and am struggling to find the right combination of filebeat and processor configuration. If I configure json interpreter it trips over th…

Found the solution to filter the error line: exclude_lines: ['^\['] the [ must be escaped and you can't match the end of the line with $.

Discuss the Elastic Stack

Parse single array json (Elastic Agent)

Elastic Stack Elastic Agent

dmgeurts (Djerk Geurts) October 23, 2023, 12:35pm 3

Another issue is that the json file I have doesn't contain a newline after the closing ] bracket.

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.