Questions tagged [logstash-json]

5 questions
0
votes
1 answer

How to Combine the First and Last Name fields into a new field logstash?

Sample Data : { "_id": "5c53d41e80e3f817d9cec5b0", "index": 0, "account_number": 1623, "balance": 22526.72, "firstname": "Desiree", "lastname": "Mays", "age": 46, "gender": "female", "address": "931 Metropolitan Avenue, Faxon, Oregon,…
Arya
  • 1
0
votes
1 answer

How to apply parse failure tag only when message fails BOTH filters instead of just one?

My logtash config has two filters: 1) parses a log message and 2) parses a JSON message: filter { grok { match => { "message" => …
doctopus
  • 5,349
  • 8
  • 53
  • 105
0
votes
1 answer

Removing Json object name using Logtash

I'm trying to parse the following json using logstash { "payload":…
0
votes
1 answer

logstash index not assigned with json pattern

I am new to ELK stack and trying to configure fields in kibana dashboard. my logstash.conf input { tcp { port => 5000 } } filter{ json{ source => "message" add_field => { "newfiled" => "static" } } }} output…
user3498109
  • 11
  • 1
  • 6
0
votes
1 answer

How to easily promote a JSON member to the main event level?

I'm using an http_poller to hit an API endpoint for some info I want to index with elasticsearch. The result is in JSON and is a list of records, looking like this: { "result": [ {...}, {...}, ... ] } Each result object in the…
Paul
  • 35,689
  • 11
  • 93
  • 122