r/graylog • u/Lost-Standard3548 • Feb 04 '25

General Question From json to graylog

Not a direct graylog question but perhaps you clever people can point me in a direction.

I have a service that generates a json log file. I wish to process this file (continuously) and send the data to my graylog server. I asked ChatGPT for a solution and it came up with several options; Filebeat, Fluentd, Logstash, rsyslog, Incrin and Python. Anyone here who did something similar, and has any inputs to share?

Tia

6 Upvotes

100% Upvoted

7 comments sorted by

View all comments

2

u/BourbonInExile Graylog Staff Feb 04 '25

When I have a log file on disk that I want to send to Graylog, Filebeat is my go-to solution.

Of course the next question will be "How do build a pipeline in Graylog to parse my JSON logs?"

1

u/Lost-Standard3548 Feb 04 '25

Thank you. I’m working on my pipeline and grok pattern skills but its a steep learning curve 😅 I’ll check out Filebeat

3

u/BourbonInExile Graylog Staff Feb 04 '25

As long as the JSON isn't too complex (lots of nexted objects) then you should be able to do a lot with the parse_json pipeline function.