mryanb
September 6, 2018, 9:40pm
1
I’m trying to parse some JSON. The fields are not known. The solution mentioned Parse unknown JSON with pipelines appears to not be possible. Is there a way to currently handle in 2.4.6?
https://github.com/Graylog2/graylog-plugin-pipeline-processor/pull/228
jan
(Jan Doberstein)
September 7, 2018, 10:56am
2
That function will be in 3.0 - not in the current stable.
mryanb
September 7, 2018, 1:57pm
3
@jan Is there any way to handle in the current version?
jan
(Jan Doberstein)
September 10, 2018, 6:05am
4
When you look into http://docs.graylog.org/en/2.4/pages/pipelines/functions.html#parse-json
You see that after the JSON is parsed you can select a specific element and write that into a field: http://docs.graylog.org/en/2.4/pages/pipelines/functions.html#select-jsonpath
That you can just take a json string and pipe that into set_fields
is currently not possible and supported. Thats the reason for the above PR:
system
(system)
Closed
September 24, 2018, 6:05am
5
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.