Logstash json过滤器解析的字段无法在Logstash中读取
[英]Logstash json filter parsed fields cannot be read within logstash
问题描述
I am parsing a json file with "codec => json" in the input and " json { source=>message }" in the filter. 
我正在使用输入中的“编解码器=> json”和过滤器中的“ json {source => message}”解析一个json文件。
I have also tried alternating the two. 我也尝试过交替使用两者。
The parsed fields cannot be read by logstash using "if [comment]". 使用“ if [comment]”，logstash无法读取已解析的字段。 This will not work despite the being about to see the field with values with "stdout { codec => rubydebug }" as output 尽管将要看到以“ stdout {codec => rubydebug}”为输出值的字段，但这将无法正常工作
1 个解决方案
解决方案1
0 已采纳 2017-02-10 09:42:35
I just found out that the fields that I am trying to work with are actually sub fields. 我刚刚发现，我要使用的字段实际上是子字段。 I was trying to access them like normal fields. 我试图像普通字段一样访问它们。
声明:本站的技术帖子网页，遵循CC BY-SA 4.0协议，如果您需要转载，请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.