# Parsing Nested JSON inside JSON getting NilClass
**URL:** https://discuss.elastic.co/t/parsing-nested-json-inside-json-getting-nilclass/247593
**Category:** Logstash
**Created:** [September 4, 2020, 8:08pm UTC](https://discuss.elastic.co/t/parsing-nested-json-inside-json-getting-nilclass/247593 "2020-09-04T20:08:48Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@mzubairsaleem](https://discuss.elastic.co/u/mzubairsaleem)
#### Post date: [September 4, 2020, 8:08pm UTC](https://discuss.elastic.co/t/parsing-nested-json-inside-json-getting-nilclass/247593/1 "2020-09-04T20:08:48Z")
[ERROR] 2020-09-04 21:58:24.155 [[main]\>worker0] ruby - Ruby exception occurred: undefined method 'each' for nil:NilClass
[ERROR] 2020-09-04 21:58:24.155 [[main]\>worker0] ruby - Ruby exception occurred: undefined method 'each' for nil:NilClass
[WARN] 2020-09-04 21:58:24.156 [[main]\>worker0] split - Only String and Array types are splittable. field:results is of type = NilClass
```
{
"host" => "localhost",
"message" => "{",
"type" => "json",
"@version" => "1",
"tags" => [
[0] "_jsonparsefailure",
[1] "_rubyexception",
[2] "_split_type_failure"
],
"path" => "/etc/logstash/conf.d/data1.json",
"@timestamp" => 2020-09-04T19:58:20.042Z
}
{
"host" => "localhost",
"message" => " \"port1\":{",
"type" => "json",
"@version" => "1",
"tags" => [
[0] "_jsonparsefailure",
[1] "_rubyexception",
[2] "_split_type_failure"
],
"path" => "/etc/logstash/conf.d/data1.json",
"@timestamp" => 2020-09-04T19:58:20.099Z
}
```
Config File
```
input {
file {
path => "/etc/logstash/conf.d/data1.json"
type => "json"
codec => "json"
mode => "read"
sincedb_path => "/dev/null"
start_position => "beginning"
}
}
filter {
ruby {
code => '
val_a = []
event.get("[results]").each do |k, v|
val_a << v
end
event.set("[results]", val_a)
'
}
split {
field => "results"
}
}
output {
stdout {
codec => rubydebug
}
}
```
Following is the Data I want to parse and get all results with all other parameters from JSON Object and store in ES
```
{
"http_method": "GET",
"revision": "1598475252.192415",
"results": {
"port1": {
"id": "port1",
"name": "port1",
"alias": "",
"mac": "00:00:00:00:00:00",
"ip": "0.0.0.0",
"mask": 0,
"link": false,
"speed": 0,
"duplex": -1,
"tx_packets": 0,
"rx_packets": 0,
"tx_bytes": 0,
"rx_bytes": 0,
"tx_errors": 0,
"rx_errors": 0
},
"port2": {
"id": "port2",
"name": "port2",
"alias": "",
"mac": "00:00:00:00:00:00",
"ip": "0.0.0.0",
"mask": 0,
"link": false,
"speed": 0,
"duplex": 0,
"tx_packets": 0,
"rx_packets": 0,
"tx_bytes": 0,
"rx_bytes": 0,
"tx_errors": 0,
"rx_errors": 0
},
"port3": {
"id": "port3",
"name": "port3",
"alias": "",
"mac": "00:00:00:00:00:00",
"ip": "0.0.0.0",
"mask": 0,
"link": false,
"speed": 0,
"duplex": 0,
"tx_packets": 0,
"rx_packets": 0,
"tx_bytes": 0,
"rx_bytes": 0,
"tx_errors": 0,
"rx_errors": 0
}
},
"vdom": "root",
"path": "system",
"name": "interface",
"status": "success",
"serial": "FG1K5D3I14801563",
"version": "v6.2.3",
"build": 1066
}
```
Help will be appreciated.
Thanks
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [September 4, 2020, 9:10pm UTC](https://discuss.elastic.co/t/parsing-nested-json-inside-json-getting-nilclass/247593/2 "2020-09-04T21:10:13Z")
That looks like you have pretty-printed JSON in a file, which a file filter consumes one line at a time. None of those lines are going to be valid JSON, so the json codec will get a parse failure. Then the ruby filter will get an exception because there is no [results], then the split filter will get an exception for the same reason (the ruby filter does not get as far as adding the empty array if it gets an exception).
See [here](https://discuss.elastic.co/t/exception-logstash-unexpected-character-code-58-expected-a-valid-value-number-string-array-object-true-false-or-null/241198/2) for the solution.
The multiline code will replace the json code so you will have to add a json filter.
---
### Author:  [@mzubairsaleem](https://discuss.elastic.co/u/mzubairsaleem)
#### Post date: [September 4, 2020, 9:26pm UTC](https://discuss.elastic.co/t/parsing-nested-json-inside-json-getting-nilclass/247593/3 "2020-09-04T21:26:01Z")
Thanks, used that but Now I'm getting this
> split - Only String and Array types are splittable. field:results is of type = Hash
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [September 4, 2020, 10:20pm UTC](https://discuss.elastic.co/t/parsing-nested-json-inside-json-getting-nilclass/247593/4 "2020-09-04T22:20:09Z")
Are you still using the ruby filter to convert the results hash to an array? Maybe try a different field name when doing the event.set and split, just for testing purposes.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 2, 2020, 10:20pm UTC](https://discuss.elastic.co/t/parsing-nested-json-inside-json-getting-nilclass/247593/5 "2020-10-02T22:20:11Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.