[Magnus Bäck] Thanks for your help. Everythink is ok, below is my logstash configuration which is correct and generate event per element in my vectorList.
input {
file {
type => "MyLog"
path => ["C:/logs/X/*.json"]
start_position => "beginning"
codec => json
}
}
filter {
json { source => "message" }
split {
field => "VectorList"
}
mutate {
add_field => {
"LocalizationId" => "%{[VectorList][ServiceVariantId]}"
"ServiceVariantId" => "%{[VectorList][ServiceVariantId]}"
"Date" => "%{[VectorList][Date]}"
"IsAvailable" => "%{[VectorList][IsAvailable]}"
"FreeTermCount" => "%{[VectorList][FreeTermCount]}"
"SegmentFreeTermCount" => "%{[VectorList][SegmentFreeTermCount]}"
"FilterValue" => "%{[VectorList][FilterValue]}"
}
remove_field => [ "[message]" ]
}
}
output {
stdout { codec => rubydebug }
elasticsearch {
hosts => ["192.168.0.1:9200"]
}
}