# Problem with JSON extractor

**URL:** <https://community.graylog.org/t/problem-with-json-extractor/1313>\
**Category:** Graylog Central (peer support)\
**Created:** [June 1, 2017, 1:41pm UTC](https://community.graylog.org/t/problem-with-json-extractor/1313 "2017-06-01T13:41:46Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Anc1ent](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/anc1ent/32/385_2.png) [@Anc1ent](https://community.graylog.org/u/Anc1ent)\
**Post date:** [June 1, 2017, 1:41pm UTC](https://community.graylog.org/t/problem-with-json-extractor/1313/1 "2017-06-01T13:41:46Z")

</div>

RAW message:

 ![](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/1X/fd57fe7110649d0d7d36cec7532ac97364f3b193.jpg)  
I need extract field “message” with JSON(?) extractor, but when i create extractor.  
In the logs graylog-server:  
[https://pastebin.com/PjDBV2Z0](https://pastebin.com/PjDBV2Z0)  
and messages accumulate in the journal

field message:  
message

{“name”:“Rewinder”,“pid”:1,“thread”:“70040335119280”,“level”:“info”,“level\_index”:2,“host”:“writer.test”,“application”:“DbNg::Application”,“duration\_ms”:8.204418,“duration”:“8.204ms”,“message”:“WebDAV read”,“row”:{“id”:595822089,“shard\_key”:“24”,“shard\_atom\_key”:“24:50:0500357:1317”,“system\_number”:“24:50:0500357:1317-24.RTRIGHTS.E.8496431001”,“write\_id”:50596097,“timespec”:“2017-05-03T10:53:57.811+00:00”},“timestamp”:“2017-06-01T13:40:44.229129Z”}

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [June 1, 2017, 2:18pm UTC](https://community.graylog.org/t/problem-with-json-extractor/1313/2 "2017-06-01T14:18:38Z")

</div>

and what is your question?

---

<div class="post-metadata">

**Author:** ![Anc1ent](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/anc1ent/32/385_2.png) [@Anc1ent](https://community.graylog.org/u/Anc1ent)\
**Post date:** [June 1, 2017, 2:20pm UTC](https://community.graylog.org/t/problem-with-json-extractor/1313/3 "2017-06-01T14:20:27Z")

</div>

sorry, what could be the problem? wrong format for timestamp or?

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [June 1, 2017, 5:45pm UTC](https://community.graylog.org/t/problem-with-json-extractor/1313/4 "2017-06-01T17:45:39Z")

</div>

Yes - the timestamp is not parseable … because it is to accurate.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [June 15, 2017, 5:45pm UTC](https://community.graylog.org/t/problem-with-json-extractor/1313/5 "2017-06-15T17:45:39Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.