Using json in logstash

Elastic Stack Logstash
1

Hey, I'm trying to send JSON to logstash looking like this:

         "build_url" => "https://www.build.url",
             "fields" => {
         "log_source" => "log_json"
     },
         "@timestamp" => 2020-10-19T11:12:20.283Z,
              "input" => {
         "type" => "log"
     },
               "host" => {
         "name" => "hosname"
     },
          "build_num" => "62",
            "message" => "{\n    \"install\": {}",
           "job_name" => "create-vm"
}

Logstash doesn't seem to be doing anything with it even though i have the following configuration:

 filter {
   if [log_source] == "log_json" {
     json {
         source => "message"
     }
   }
 }

I have more filters in the logstash configuration that are working, so the issue is specifically in the JSON part.

I'm not seeing this in elasticsearch, what am I doing wrong?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.