# Parsing Json within a Json in Filebeat

**URL:** <https://discuss.elastic.co/t/parsing-json-within-a-json-in-filebeat/125360>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [March 23, 2018, 11:44am UTC](https://discuss.elastic.co/t/parsing-json-within-a-json-in-filebeat/125360 "2018-03-23T11:44:25Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![sheen2x](https://avatars.discourse-cdn.com/v4/letter/s/839c29/32.png) [@sheen2x](https://discuss.elastic.co/u/sheen2x)\
**Post date:** [March 23, 2018, 11:44am UTC](https://discuss.elastic.co/t/parsing-json-within-a-json-in-filebeat/125360/1 "2018-03-23T11:44:25Z")

</div>

Hi Elastic Support,

**I'm using Filebeat 6.2.2 and we have a json log that looks like this:**

{"Name":"John","Locations":["USA"],"Enabled":true,"Notes":"{"children":2,"details":[{"birthday":"1999-01-01t01:00:00.00000-04:00","childname":"Ringo"},{"birthday":"2001-03-01t01:00:00.00000-04:00","childname":"Michael"}]}"}

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/c/bc730d2f0ab803916abf0b46d6c326bcb1d3ba34.png)

**Pretty view:**

{  
"Name":"John",  
"Locations":  
[  
"USA"  
],  
"Enabled":true,  
"Notes": "{"children":2,"details":[{"birthday":"1999-01-01t01:00:00.00000-04:00","childname":"Ringo"},{"birthday":"2001-03-01t01:00:00.00000-04:00","childname":"Michael"}]}"  
}

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/9/0/90bf4c63ea910011af85b11ec430f496f16d06e0.png)

**When I'm feeding it using Filebeat, it looks like this is Kibana:**

Name: John  
Locations: USA  
Enabled: true  
Notes.Children: 2  
Notes.details: {  
"birthday":"1999-01-01t01:00:00.00000-04:00",  
"childname":"Ringo"  
},  
{ "birthday":"2001-03-01t01:00:00.00000-04:00",  
"childname":"Michael"  
}

**Is there a way for it to be like this is Kibana by just using Filebeat?**

Name: John  
Locations: USA  
Enabled: true  
Notes.Children: 2  
Notes.details.birthday1: 1999-01-01t01:00:00.00000-04:00  
Notes.details.childname1: Ringo  
Notes.details.birthday2: 2001-03-01t01:00:00.00000-04:00  
Notes.details.childname2: Michael

**Filebeat 6.2.2 config:**

filebeat.prospectors:

- type: log  
enabled: true  
paths:

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 20, 2018, 11:44am UTC](https://discuss.elastic.co/t/parsing-json-within-a-json-in-filebeat/125360/2 "2018-04-20T11:44:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.