Uploaded image for project: 'Observability and Data Analysis Program'
  1. Observability and Data Analysis Program
  2. OBSDA-52

Filter the content of the json parsed logs

XMLWordPrintable

    • False
    • False
    • undefined

      Forwarding logs through fluentd instance using the fluentdforward protocol and also using the json parsing there. Which work's fine.

       

      Question:- Is there a way we can extract or filter the child fields of JSON logs instead of sending the content of the whole log.

      For example, We have child fields under the structured parent field.

      ~~~
      structured": {
            "ResponseInBytes": "xxxx",
            "RequestTime": "xxxx",
            "Host": "xxxx",
            "JSESSIONID": "-",
            "ClientIP": "xxxx",
      ~~~

      But we want to send only particular fields like below. effectively just take every child object of the "structured" field.

      ~~~
            "RequestTime": "xxxx",
            "Host": "xxxx",
            "JSESSIONID": "-",
            "ClientIP": "xxxx",
      ~~~

      Please let us know in case of any information is required.

       

              rh-ee-rfloren Roger Florén
              rhn-support-aharchin Akhil Harchinder (Inactive)
              Votes:
              1 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: