Logstash issue with json_formater [LogStash::Json::ParserError: Unexpected character ('-' (code 45)): was expecting comma to separate ARRAY entries] -


i have issue converting value through logstash, can't find solution it. seems linked date.

#log line [2017-08-15 12:30:17] api.info: {"sessionid":"a216925---ff5992be7520924ff25992be75209c7","action":"processed","time":1502789417,"type":"bookingprocess","page":"order"} [] []

logstash configuration

filter {         if [type] == "api-prod-log" {                 grok {                         match => {"message" => "\[%{timestamp_iso8601:timestamp}\] %{word:module}.%{word:level}: (?<log_message>.*) \[\] \[\]" }                         add_field => [ "received_from", "%{host}" ]                 }                 json {                     source => "log_message"                     target => "flightsearchrequest"                     remove_field=>["log_message"]                 }                 date {                         match => [ "timestamp", "yyyy-mm-dd hh:mm:ss" ]                         timezone => "asia/jerusalem"                 }         } }

any idea ?

thanks

what version of logstash using? on logstash 5.2.2 following logstash config:

input {     stdin{} }  filter {     grok {         match => {"message" => '\[%{timestamp_iso8601:timestamp}\] %{word:module}.%{word:level}: (?<log_message>.*) \[\] \[\]' }     }     json {         source => "log_message"         target => "flightsearchrequest"         remove_field=>["log_message"]     }     date {         match => [ "timestamp", "yyyy-mm-dd hh:mm:ss" ]         timezone => "asia/jerusalem"     } }  output{     stdout {codec => "rubydebug"} }

i correct result , no errors, when pass log line input:

{              "@timestamp" => 2017-08-15t09:30:17.000z,     "flightsearchrequest" => {            "action" => "processed",         "sessionid" => "a216925---ff5992be7520924ff25992be75209c7",              "time" => 1502789417,              "page" => "order",              "type" => "bookingprocess"     },                   "level" => "info",                  "module" => "api",                "@version" => "1",                 "message" => "[2017-08-15 12:30:17] api.info: {\"sessionid\":\"a216925---ff5992be7520924ff25992be75209c7\",\"action\":\"processed\",\"time\":1502789417,\"type\":\"bookingprocess\",\"page\":\"order\"} [] []",               "timestamp" => "2017-08-15 12:30:17" }

i've removed check "type" in beginning, can test if can affect result?


Comments

Post a Comment

Popular posts from this blog

python Tkinter Capturing keyboard events save as one single string -

is possible store keyboard events 1 string? code below stores 1 char , prints it. card reader or bar code reader, contains collection of character/ string not 1 character @ time. goal save char pressed text variable. from tkinter import * root = tk() def key(event): text= event.char text+= event.char print ("pressed", text) def callback(event): frame.focus_set() print ("clicked at", event.x, event.y) frame = frame(root, width=100, height=100) frame.bind("<key>", key) frame.bind("<button-1>", callback) frame.pack() root.mainloop() currently, creating text variable , everytime key() function gets called, , text stores last character typed. you can define text module level variable , , use module level text inside key function - text = '' def key(event): global text text+= event.char print("pressed", text)
Read more

android - InAppBilling registering BroadcastReceiver in AndroidManifest -

i'm implementing inapp billing in android app. works well, however, i'm trying decouple broadcast receiver activity manifest. suggestion in android's trivialdrive sample: // important: dynamically register broadcast messages updated purchases. // register receiver here instead of <receiver> in manifest // because call getpurchases() @ startup, therefore can ignore // broadcasts sent while app isn't running. // note: registering listener in activity bad idea, done here // because sample. regardless, receiver must registered after // iabhelper setup, before first call getpurchases(). currently there's class extends broadcastreceiver : public class iabbroadcastreceiver extends broadcastreceiver { /** * intent action receiver should filter for. */ public static final string action = "com.android.vending.billing.purchases_updated"; private final iabbroadcastlistener mlistener; public iabbroadcastreceiver(iabbroadcastlistener listener) { m
Read more

javascript - Z-index in d3.js -

i have map , when hover effect on region of map below yellow line , circle, last ones disappear. how can solve problem? http://jsfiddle.net/ot21n9qx/ var arc = g.append("path") .style("fill", "none") .style("stroke", "yellow") .style("stroke-width", 2) .attr("d", "m" + pathorigin[0] + "," + pathorigin[1] + " q" + svgpoint[0] + "," + pathorigin[1] + " " + svgpoint[0] + "," + svgpoint[1]); var circlesize = d3.scale.linear() .domain([0, 0.5, 1]) .range([4, 10, 4]); svg not have z order draws objects in order created. need create path , circle after create highlight regions. here forked fiddle: http://jsfiddle.net/o00fzgaf/1/
Read more