This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# ruby { | |
# path => "/etc/logstash/ancillary/ruby-scripts/json-to-event.rb" <--Example path to ruby file, be sure to update with yours | |
# script_params => { | |
# "json_field" => "notes" <--Specify the field you want to extract json from (default: message) | |
# "array" => true <--Do you want to flatten arrays within the json (default: false) | |
# "target" => "parent" <--Specify root level name if wanted (default: root of document) | |
# "tag_match_failure" => true <--Do you want to tag event when json regex match fails (defaults: false) | |
# } | |
# } |