Split Value into different document

[yuswanul]

Hi there,

if i have data like this [{...},{...},{...}] how can i split them into different documents like

document 1 => {...}
document 2 => {...}
document 3 => {...}

so in that way, I can use the json filter to spread out the data inside { } like this:

json {
   source => "message"
 }

Thanks

[Priscilla_Parodi]

Hello @yuswanul,

You can use the split filter plugin. The field being split can either be a string or an array.

In your Logstash pipeline, it would be something like:

filter {
   split {
     field => "message"
   }
}