Reading JSON data from logstash

Hi all,
I have a lot of JSON data and I want to visualize it. I have seen the POST_bulk method in Kibana, but it is not dynamic. We can not update the data whenever it is being generated. So, I thought of using logstash for this purpose and read my JSON files. I am not able to find the exact solution to this. I am posting my logstash.conf file below. What changes do I have to make?

input{
    file{
        path => "C:\Users\tushar\Documents\Reports\JsonData\first_run*.json"
        start_position => "beginning"
        type => "json"
        sincedb_path => "NULL"
    }
    #  stdin{}
}

filter{
    json{
        source => "message"
    }
}
output{
      elasticsearch{
          hosts => "http://localhost:9200"
           index => "jsondata"
     }
    stdout{
        codec =>"rubydebug"
    }
}
`````````````````````````````````````````````````````````````````````````````

I have gone through a few discussions on this topic on this site only. But I am not able to find the solution from those discussions. Also currently by using this logstash.conf, I am not able to read the JSON file and it is not getting reflected in Kibana UI Index. Kindly, help me with this.

Do not use backslash in the path option of a file input, use forward slash.

If you do not want the in-memory sincedb persisted across restarts then on Windows set the sincedb_path option to "NUL".

I did the changes but it was of no use still it is not reading the JSON data from that directory.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.