# Creating JSON Extractor

**URL:** <https://community.graylog.org/t/creating-json-extractor/32904>\
**Category:** Graylog Central (peer support)\
**Created:** [July 5, 2024, 2:06am UTC](https://community.graylog.org/t/creating-json-extractor/32904 "2024-07-05T02:06:15Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![wilsonshow](https://avatars.discourse-cdn.com/v4/letter/w/df705f/32.png) [@wilsonshow](https://community.graylog.org/u/wilsonshow)\
**Post date:** [July 5, 2024, 2:06am UTC](https://community.graylog.org/t/creating-json-extractor/32904/1 "2024-07-05T02:06:15Z")

</div>

I am send logs from Syslog-ng to Graylog. Following the instruction on this documentation on oneindentity website. However, I am stuck on creating of extractor.

 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/7/1/71eca02710e094bb1be5ea4281783186a21b738c.png)

I have found a link on graylog mentioning on How to use a JSON Extractor. I try following the video but seem like the the link has been updated. The current marketplace link is link to the Graylog community marketplace. So not sure if it the correct one.

> **[How to use a JSON Extractor](https://graylog.org/videos/json-extractor/)**
>
> In this Graylog tech series video we’re going to learn how to extract valuable data from JSON responses using JSON extractors. We will briefly teach you how to set them up, correctly configure them, and do some parsing. USING JSON EXTRACTORS TO...

 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/d/3/d363fbb15b4272fbd2a9b7915aed08fc1a1f34b3.png)

[https://support.oneidentity.com/zh-cn/technical-documents/syslog-ng-open-source-edition/3.19/administration-guide/34#TOPIC-1094590](https://support.oneidentity.com/zh-cn/technical-documents/syslog-ng-open-source-edition/3.19/administration-guide/34#TOPIC-1094590)

What I have done is the following:

1. Creating an raw TCP input on Graylog
2. Configuration the setting on syslog-ng

Currently I am using Graylog version 5.2

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [July 19, 2024, 2:06am UTC](https://community.graylog.org/t/creating-json-extractor/32904/2 "2024-07-19T02:06:41Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.