Parsing quoted and escaped json events

I'm trying to find a way to parse a JSON encoded message like this. I do not know if filebeat is a good choice here or logstash is better one.

the events are look like this and I'm looking for a way to extract the "message" portion which has a JSON object in it.

"{\"log\": \"text\", \"events\": \"12\", \"message\": \"some text here then an embedded json {\\\"fieldA\\\": \\\"ValueA\\\"}\"}"

Any Idea?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.