Represent logstash output in proper json format


#1

How to represent logstash output in proper json format

event name represents station name, event id represent station id.
How can i combine them to get proper json data

My conf file:

input {
file {
path => "D:/ELK-stack/stations.xml"
start_position => "beginning"
sincedb_path => "NUL"
codec => multiline {
pattern => "|"
negate => true
what => "previous"
auto_flush_interval => 1
}
}
}

filter {
if [message] == "" or [message] == "" {
drop {}
}
xml {
source => "message"
target => "message.parsed"
xpath => [
"/stations/station/id/text()", eventid ,
"/stations/station/name/text()", eventname
]
force_array => false
}
}

output {
stdout { codec => rubydebug }
}

My Xml file:

.stations>
.\station>
.id>5 ./id>
.name>Aurora Hills Community Ctr/18th - Hayes St . /name>
./station>
.station>
.id>6
.name>Pentagon City Metro / 12th - S Hayes St ./name>
./station>
./stations>

Please help me


(Andreas H) #2

output { stdout { codec => json } }

:slight_smile:


(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.