Logstash events...

event.json

{
  "@version":"1",
  "@timestamp":"2013-12-29T15:41:02.123Z",
  "host":"host.example.com",
  "collectd_type":"df_complex",
  "plugin":"df",
  "plugin_instance":"Volumes-Time Machine Backups",
  "type_instance":"used",
  "value":2604146343936.0,
  "tags":["collectd"]
}

output.rb

{
  :path=>"/tmp/telnacdr4.log",
  :text=> "{
    \"cdr\":[
      {
        \"EventName\":\"NEWCDR\",
        \"PerMinutes\":1.2E-4,
        \"Type\":\"DATA\",
        \"OriginNumber\":1.4176980006224E13,
        \"EventObject\":\"Cdr\",
        \"Location\":\"Spain\",
        \"EventCode\":\"NEWCDRBYURL\",
        \"StartDateTime\":\"2013-12-28 03:15:52.000000000\",
        \"Cost\":0.0012,
        \"Network\":187,
        \"Duration\":10,
        \"DateTimeEvent\":\"2013-12-28 03:15:58.000000000\",
        \"Iccid\":8.910300000000171E18,
        \"DestinationNumber\":34609,
        \"CallId\":\"988C12E6-7FA84DD6-B89517CC-272AB6F9\",
        \"ReferenceId\":887517642,
        \"ObjectId\":\"546212EB-48424730-A49028D6-F0A53956\"
      }
    ]
  }",
  :level=>:debug,
  :file=>"/home/fontanon/borrame/logstash-1.3.2-flatjar.jar!/logstash/inputs/file.rb",
  :line=>"130"
}