Parse JSON
A bundle of processors for parsing JSON logs.
Included Processors
1
Parse JSON
Parses a JSON object from the log body and creates new fields for each key in the JSON object.
2
Parse Timestamp
Converts the extracted timestamp string into a proper timestamp format. This processor takes the 'timestamp' field and converts it into a valid timestamp in the log body.
3
Delete Fields
Removes the original timestamp field after it has been parsed.
Example Telemetry
Log
| Name | Before | After |
|---|---|---|
| observed_time | 2026-01-15T10:30:00Z | 2026-01-15T10:30:00Z |
| time | 2026-01-15T10:30:00Z | 2025-06-15T10:30:00Z |
| severity_text | INFO | INFO |
| severity_number | 9 | 9 |
Body
{"level":"info","timestamp":"2025-06-15T10:30:00Z","message":"User logged in","user_id":"12345"}| level | info |
| message | User logged in |
| user_id | 12345 |
Resource
| Name | Before | After |
|---|---|---|
| host.name | my-host.local | my-host.local |
| service.name | example-service | example-service |