logstash index not assigned with json pattern

Question

I am new to ELK stack and trying to configure fields in kibana dashboard. my logstash.conf

input {
tcp {
    port => 5000
}
}

filter{
json{
    source => "message"
    add_field => {
        "newfiled" => "static"
    }
}

}}

output {
elasticsearch {
    hosts => "elasticsearch:9200"
    index => "test"
}
}

But index test is not present when i use curl to elastic server. Iam using python-logstash.I have installed json plugin. someone can help me how to send the json to elastic search so that I could view it on kibana dashboard?

The ==> is incorrect syntax. Should be =>. Can you post logstash logs here? — Dmitriy
– Dmitriy, Commented Jun 6, 2017 at 14:23
I am using it inside docker containers. So I think access to log files is not possible. I tried with => did not work — user3498109
– user3498109, Commented Jun 6, 2017 at 14:38

user3498109 · Accepted Answer · 2017-06-06 15:32:34Z

1

Found the issue. There are two libraries json and jsonencode. If you are sending dictionary in text format(or using python logstash) make sure you use json encode

answered Jun 6, 2017 at 15:32

user3498109

111 silver badge6 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

logstash index not assigned with json pattern

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related