【问题标题】:Json parsing losgstashJson解析logstash
【发布时间】:2021-07-03 10:55:21
【问题描述】:

我无法用 logstash 解析这个 json...有人可以帮助我吗? 似乎它的解析方式无法被logstash读取。 有一个红宝石代码来解析这个吗? 我无法提取嵌套在方括号中的字段

    [
     {
      "capacity": 0,
      "created_at": "2021-04-06T16:18:34+02:00",
      "decisions": [
       {
        "duration": "22h16m4.141220361s",
        "id": 842,
        "origin": "CAPI",
        "scenario": "crowdsecurity/http-bad-user-agent",
        "scope": "ip",
        "simulated": false,
        "type": "ban",
        "value": "3.214.184.223/32"
       },
    .
    .
    .
{
    "duration": "22h16m4.195897491s",
    "id": 904,
    "origin": "CAPI",
    "scenario": "crowdsecurity/http-backdoors-attempts",
    "scope": "ip",
    "simulated": false,
    "type": "ban",
    "value": "51.68.11.195/32"
   }
  ],
  "events": null,
  "events_count": 0,
  "id": 12,
  "labels": null,
  "leakspeed": "",
  "machine_id": "N/A",
  "message": "",
  "scenario": "update : +63/-0 IPs",
  "scenario_hash": "",
  "scenario_version": "",
  "simulated": false,
  "source": {
   "scope": "Community blocklist",
   "value": ""
  },
  "start_at": "2021-04-06 16:18:34.750588276 +0200 +0200",
  "stop_at": "2021-04-06 16:18:34.750588717 +0200 +0200"
 }
]


 

【问题讨论】:

    标签: json ruby parsing logstash


    【解决方案1】:
    Require JSON
    JSON.parse(yourString)
    

    很可能就是您要找的东西。 模块描述here

    【讨论】:

      猜你喜欢
      • 1970-01-01
      • 1970-01-01
      • 2015-04-29
      • 1970-01-01
      • 2015-06-18
      • 1970-01-01
      • 1970-01-01
      • 1970-01-01
      • 1970-01-01
      相关资源
      最近更新 更多