how to parse first as json, then as grok pattern?

[Robert Chen]

say the message is in json format:

{

"timestamp"： “2018-02-16-11:22:11",

"loglevel": "warn",

"message": "account number 123456 paid $355"

}

I want to parse first first as json, then as grok pattern for message in this json, how can I do it in fluentd? 

[Mr. Fiber]

How about using parser filter?

https://docs.fluentd.org/v1.0/articles/filter_parser

Masahiro

--
You received this message because you are subscribed to the Google Groups "Fluentd Google Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to fluentd+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.