# Parse single line multi object json with logstash

**URL:** <https://discuss.elastic.co/t/parse-single-line-multi-object-json-with-logstash/207608>\
**Category:** Logstash\
**Created:** [November 13, 2019, 1:15am UTC](https://discuss.elastic.co/t/parse-single-line-multi-object-json-with-logstash/207608 "2019-11-13T01:15:10Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![manud](https://avatars.discourse-cdn.com/v4/letter/m/edb3f5/32.png) [@manud](https://discuss.elastic.co/u/manud)\
**Post date:** [November 13, 2019, 7:07am UTC](https://discuss.elastic.co/t/parse-single-line-multi-object-json-with-logstash/207608/4 "2019-11-13T07:07:07Z")

</div>

Move my suggestion to before the json filter:

```auto
filter {
    mutate {
        gsub => [ "message", "}{", "}
{" ]
    }
    split {
        field => "message"
    }
    json {
        source => "message"
    }
    split {
        field => "[logEvents]"
    }
    mutate {
        add_field => {
            "log-event-id" => "%{[logEvents][id]}"
            "log-event-message" => "%{[logEvents][message]}"
            "log-event-time" => "%{[logEvents][timestamp]}"
        }
        remove_field => [ 
            "[message]",
            "[host]",
            "[path]",
            "[logEvents]",
            "[subscriptionFilters]",
            "[messageType]"
        ]
    }
}

```

---

_[View the full topic](https://discuss.elastic.co/t/parse-single-line-multi-object-json-with-logstash/207608)._