Parse JSON

Overview

The parse_json processor parses JSON data for an event, including any nested fields. The following table describes several optional parameters you can configure in the parse_json processor.

OptionRequiredTypeDescription
sourceNoStringThe field in the Event that will be parsed. Default value is message.
destinationNoStringThe destination field of the parsed JSON. Defaults to the root of the Event. Cannot be “”, /, or any whitespace-only String because these are not valid Event fields.
pointerNoStringA JSON Pointer to the field to be parsed. There is no pointer by default, meaning the entire source is parsed. The pointer can access JSON Array indices as well. If the JSON Pointer is invalid then the entire source data is parsed into the outgoing Event. If the pointed-to key already exists in the Event and the destination is the root, then the pointer uses the entire path of the key.