【logstash】 - 使用json解析資料

標籤：json

filter-json：http://www.logstash.net/docs/1.4.2/filters/json

json資料：

{"account_number":995,"balance":21153,"firstname":"Phelps","lastname":"Parrish","age":25,"gender":"M","address":"666 Miller Place","employer":"Pearlessa","email":"[email protected]","city":"Brecon","state":"ME"}

logjson.conf檔案：

input {file {  type => "accounts"  path => "D:/logsystem/logstash/bin/test/accounts.txt"start_position => "beginning"}}filter {    json{source => "message"         }}output {      stdout{codec => rubydebug}#無法解析的json不記錄到elasticsearch中if "_jsonparsefailure" not in [tags] {  elasticsearch {    host => "localhost"  }}}

結果如下：

View: Table / JSON / Raw{  "_index": "logstash-2014.12.12",  "_type": "accounts",  "_id": "7LEXwMOPQp-FrvJrrRO6Yw",  "_score": 1,  "_source": {    "message": "{\"account_number\":903,\"balance\":10238,\"firstname\":\"Wade\",\"lastname\":\"Page\",\"age\":35,\"gender\":\"F\",\"address\":\"685 Waldorf Court\",\"employer\":\"Eplosion\",\"email\":\"[email protected]\",\"city\":\"Welda\",\"state\":\"AL\"}",    "@version": "1",    "@timestamp": "2014-12-12T14:22:30.109Z",    "type": "accounts",    "host": "huangwen",    "path": "D:/logsystem/logstash/bin/test/accounts.txt",    "account_number": 903,    "balance": 10238,    "firstname": "Wade",    "lastname": "Page",    "age": 35,    "gender": "F",    "address": "685 Waldorf Court",    "employer": "Eplosion",    "email": "[email protected]",    "city": "Welda",    "state": "AL"  }}

本文出自 “儘管錯，讓我錯到死！” 部落格，請務必保留此出處http://hxw168.blog.51cto.com/8718136/1589486

【logstash】 - 使用json解析資料