Help filter JSON

I need to create a filter for the following JSON template in logstash :

log generate:

(2017-05-31 18:10:03) {
“request”: {
“headers”: {
“host”: “100.62.1.42:8001”,
“authorization”: “Bearer eyJhbGciOiJIUzM4NCIsInR5cCI6IkpXVCJ9.eyJzZXNzaW9uIjoiZDZiNGYzYzZiNmU2NDA5YjZkMmMzMDE5MWI0YTZkMDlmMDg1OTk5ZjYxZmEwMzliNTEyN2M4ODkyOTlhZmQxNmVkZGViYmQ0Y2EzYWYzZGZlYmVjOTUyOGVkMTcyNTJiNDUxN2NlNzgwZDIzM2IzYzlkYTQwZjcyZWIxMjUxZTFmY2FlMWNlZWYyNDc4ZmFlMzU5YTRlYjQzMDQzYzJjMDc3YTliMjYzYWI0YzdhOTJlMjEyOTczZmFlY2JhYTVkZjZmNzM0MjZmYmY0NzlhMDM5NWY1MGJjMTE3YjdkZTI2MjQyMzQ3ODA0MDE2MTk5ODg5MzgzOGQ1ZDU2MjdkMiIsImlhdCI6MTQ5NjI2NDk5MywiZXhwIjoxNDk2MzUxMzkzLCJpc3MiOiJjNGZtY29tbWVyY2UifQ.-vNi0yVOUeSmEfLaCNcETlMXlGnRawqJiyAV8-i–EBDJMeYkUreqyvWRw5zFSMC”,
“agent”: “Android;6.0;MotoG3;motorola;0.23.0.CCI”,
“origin”: “CCI”,
“content-type”: “application/json; charset=UTF-8”,
“accept-encoding”: “gzip”,
“user-agent”: “okhttp/3.6.0”,
“incap-proxy-684”: “OK”,
“x-forwarded-for”: “201.95.111.43, 169.57.142.104”,
“incap-client-ip”: “201.95.174.43”,
“x-forwarded-host”: “api.teste.com.br”,
“x-forwarded-server”: “api.teste.com.br”,
“connection”: “Keep-Alive”,
“content-length”: “43”
},
“params”: {},
“query”: {},
“method”: “post”,
“path”: “/v1/user/login”,
“payload”: {
“cpf”: “123456789”,
“password”: null
}
},
“statusCode”: 401,
“code”: 99,
“details”: “{“errors”:[{“type”:“InvalidGrantError”,“message”:“Bad credentials”}]}”,
“level”: “INTEGRATION”

can you help me?

Hi Rafael,

are you sure you inserted the right username/password? It says “bad credentials” …

cheers,
theresa

Hej @rafaelsilvaa10

I need to create a filter for the following JSON template in logstash

you realize that this is the Graylog Community and not the Elastic/Logstash one?

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.