The json parser plugin parses JSON logs. One JSON map per line.

Parameters

See Parse section configurations​

json_parser

Set JSON parser. If you have a problem with configured parser, check other parser type.

Here is simple comparison:

• oj: Faster json parser

• yajl: Mainly for streaming parsing

• json: Standard bundled library.

time_type

json parser changes the default value of time_type to float. If you want to parse string field, set time_type and time_format like below.

# conf
@type json
time_type string
time_format %d/%b/%Y:%H:%M:%S %z
​
# record example
{"key":"value","time":"28/Feb/2013:12:00:00 +0900"}

See also parse section article.

Example

{"time":1362020400,"host":"192.168.0.1","size":777,"method":"PUT"}

This incoming event is parsed as:

time:
1362020400 (2013-02-28 12:00:00 +0900)
​
record:
{
  "host"  : "192.168.0.1",
  "size"  : 777,
  "method": "PUT",
}

If this article is incorrect or outdated, or omits critical information, please let us know. Fluentd is a open source project under Cloud Native Computing Foundation (CNCF). All components are available under the Apache 2 License.