Support for top-level array JSON structured messages?

Hello,

We have a product that ships log messages to a file in a top level nested JSON array - example:

[{"test": "testing","hostname":"hostname1"},{"test":"testing","hostname":"hostname2"}]

We need a parser that can break out each individual event delimited by the comma to its own event.  The built-in JSON parser only recognizes JSON events individually it seems and does not recognize the top level array even though a top level array JSON is valid JSON.

Please assist or point me to a good direction.  In Logstash we can use the "split" function to assist with this.

0 1 245
1 REPLY 1