S3 to elastic

Elastic Stack Logstash
1

Hi ,

I am trying to push log files from some devices to s3
And from s3 to elasticsearch using logstash and visualize in kibana.

Now I am doing it via ec2 instance from aws.
But when I POST
[{"SessionID":"868672020397037-168099693be-6e34795e-758b-4eb5-8c6e-190e1cb36199","Study":"TestStudy","Locale":"en_US","ProdVer":"2.0.0","StudyVer":"00.01","Sponsor":"ERT","Device":"1331","Type":"SessionStart","Level":"INFO","Message":"Session","Source":"SitePad App","Location":"actions.transmitLogs","Site":"5552","ClientTime":"2019-01-01T13:24:49.727"},]

to an index via the kibana console it shows up in the following format

image
image.png866×439 18.9 KB

but when i send the data through logstash and open it in kibana it comes in this format

image
image.png1380×404 21.3 KB

all clubed togther
But I want it like how it is in the first picture

Any suggestion,

THank you,
Mohit Ruke

2

Please do not post pictures of text, just post the text and format it using markdown.

3

understood! Do you have any suggestion for my query >

4

You could use a json filter to parse the JSON.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.