Hello,
We have a product that ships log messages to a file in a top level nested JSON array - example:
[{"test": "testing","hostname":"hostname1"},{"test":"testing","hostname":"hostname2"}]
We need a parser that can break out each individual event delimited by the comma to its own event. The built-in JSON parser only recognizes JSON events individually it seems and does not recognize the top level array even though a top level array JSON is valid JSON.
Please assist or point me to a good direction. In Logstash we can use the "split" function to assist with this.