Hi Team, New to ELK environment so please bear with me. I'm trying to ingest data from json file and visualise in kibana. The ingest itself is working but the message is coming as: "message" => " "totalCount": 83\r", how can i remove the \r" from the message inside kibana the index…

Or perhaps another way by converting the file to ndjson [image] Error in parsing Pretty Json Data Logstash Another possible approach is to simply turn your data into ndjson (new line delimited json) using jq found here then you would not need to worry about the multiline …

Discuss the Elastic Stack

Parsing JSON data

Elastic Stack Logstash

Badger August 30, 2022, 4:26pm 2

You will need a multiline codec to consume pretty-printed JSON. You can then use a ruby filter to flatten the [data][malwareCountFilters] event.

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.