Transform JSON strings into JSON objects
Grepr can automatically detect and parse JSON log messages into structured objects. All fields in the JSON object are parsed and added into the attributes
field of the log event. Using this along with the remapper transform allows you to enrich your logs. See Remap JSON attribute fields to top-level log event fields.
This operation is automatically performed when creating pipeline through the UI. However, it must be manually added in the Grepr job graph when creating a pipeline through the API.
Usage example
Incoming log message:
{
"message": "{\"msg\": \"Example log message\", \"@timestamp\": \"2007-12-03T10:15:30.00Z\", \"log\": {\"level\": \"INFO\"}}"
}
Parsed log message:
{
"message": "",
"attributes": {
"@timestamp": "2007-12-03T10:15:30.00Z",
"msg": "Example log message",
"log": {
"level": "INFO"
}
}
}
Last updated on