Decompose Logstash json message into fields -


it have logfile stores event timestamp , json message. example:

timestamp {"foo": 12, "bar": 13}

i decompose keys (foo , bar) in json part fields in logstash output.

i'm aware can set format field in logstash file filter json_event in case have include timestamp in json. there json filter, adds single field complete json data structure, instead of using keys.

any ideas how can done?

try latest logstash 1.2.1 , use codec value parse json events directly.

input {     file {         type => "tweetfile"         path => ["/home/nikhil/temp/feed/*.txt"]         codec => "json"     } } filter{     json{         source => "message"         target => "tweet"     } } output {     stdout { }     elasticsearch { embedded => true } }

Comments

Post a Comment

Popular posts from this blog

matlab - Deleting rows with specific rules -

i got 20*3 cell array , need delete rows contains "137", "2" , "n:t" origin data: 't' '' '' 'np(*)' '' '' [ 137] '' '' [ 2] '' '' 'are' 'and' 'np(fcc_a1#1)' '' '' '1:t' [ 1200] [0.7052] '' [1.2051e+03] [0.7076] '' 'are' 'and' 'np(fcc_a1#3)' '' '' '2:t' [ 1200] [0.0673] '' [1.2051e+03] [0.0671] '' 'are' 'and' 'np(m23c6)' '' '' '3:t' [ 1200] [0.227...
Read more

php - MySQLi multi_query results for later use -

i using mysqli multi_query work several select statemets @ time. know how handle results, able use them later in code. example: <?php //connection stuff $query = "select name, surname database1;"; $query.= "select car, year, type database2 carid='1';"; $query.= "select product, price database3;"; if ($mysqli->multi_query($query)) { if($result = $mysqli->store_result()) { while($row = $result->fetch_row()) { --> here? } } } ?> <html> <div id='persona'> <?php foreach() { --> print name + surname } ?> </div> <div id='cars'> <?php foreach() { --> print car + year + type } ?> </div> <div id='product'> <?php foreach() { --> print product + price } ?> </div> </html> one more thing, prepared statements not possible when using multiple_query, right? there no benefit in putting unrelated queries in 1 multi ...
Read more