Hello, I would like to parse a json file, my file looks like that: file={"id":"*******","name":"test","alarm":{"error":2,"warning":3}} using this filter: json { source => "message" } I get only these fields: "alarm.error" and "alaram.warning" I would like to get this field: a…

[image] saisimo02: {"id":"*******","name":"test","alarm":{"error":2,"warning":3}} You could try this ruby { code => ' a = [] event.get("alarm").each { |k, v| h = Hash.new h["alarmLevel"] = k h["alarmValue"] =…

Parsing dictionary into json file

Elastic Stack Logstash

Badger July 19, 2019, 12:39pm 2

What you have is an alarm object that contains warning and error fields. In kibana that will show up as alarm.error and alarm.warning

      "name" => "test",
     "alarm" => {
    "warning" => 3,
      "error" => 2
},
        "id" => "*******",

Topic		Replies	Views
Nested JSON parsing in dynamic field names Logstash	2	2708	July 16, 2018
Logstash ruby filter doesn't parse json and return whole message field in Kibana Logstash	4	2407	February 9, 2019
How can I parse nested JSON strings to JSON objects? Logstash	7	1558	November 28, 2021
[JSON filter] Split Dynamic fields Logstash	4	1607	March 11, 2019
Json nested field Logstash	3	362	February 8, 2022

Parsing dictionary into json file

Related topics