The json parser plugin parses JSON logs. One JSON map per line.

Parameters

See Parse Section Configurations.

json_parser

Sets the JSON parser. If you have a problem with the configured parser, check the other available parser types.

Here is a simple comparison:

• oj: Faster json parser

• yajl: Mainly for stream parsing

• json: Standard bundled library

stream_buffer_size

Set the buffer size that Yajl will use when parsing streaming input.

See also: Method: Yajl::Parser#parse​

time_type

json parser changes the default value of time_type to float. If you want to parse string field, set time_type and time_format like this:

# conf
@type json
time_type string
time_format %d/%b/%Y:%H:%M:%S %z
​
# record example
{"key":"value","time":"28/Feb/2013:12:00:00 +0900"}

See also parse Section article.

Example

This incoming event:

{"time":1362020400,"host":"192.168.0.1","size":777,"method":"PUT"}

is parsed as:

time:
1362020400 (2013-02-28 12:00:00 +0900)
​
record:
{
  "host"  : "192.168.0.1",
  "size"  : 777,
  "method": "PUT",
}

If this article is incorrect or outdated, or omits critical information, please let us know. Fluentd is an open-source project under Cloud Native Computing Foundation (CNCF). All components are available under the Apache 2 License.