Configuring JSONPath Expression Filters - ironstream_for_splunk - ironstream_for_elastic - ironstream_for_kafka - Ironstream_Hub - 1.3

Ironstream Hub Administration

Product type
Software
Portfolio
Integrate
Product family
Ironstream
Product
Ironstream > Ironstream for Splunk®
Ironstream > Ironstream for Kafka®
Ironstream > Ironstream Hub
Ironstream > Ironstream for Elastic®
Version
1.3
Language
English
ContentType
Administration
Product name
Ironstream Hub
Title
Ironstream Hub Administration
First publish date
2022

A detailed description of JSONPath can be found here https://goessner.net/articles/JsonPath/.

If ProcessType is set to JsonPathFilter, a parent field named JsonPathFilterConfiguration must be populated with these Mandatory fields:

Fields Descriptions Valid Values
JsonPathExpression FieldName being compared.
JsonPathMatch Field value being matched.

Example JSONPath Expression Process File

An example of a Process configuration file filtering records with MFSOURCETYPE = SMF030 and sending them to a Target.
{
  "Name": "syslogjsonpath",
  "Id": "f4d6f62f-5bdf-45dc-9030-1baa9a7908f8",
  "JsonPathFilterConfiguration": {
   	 "JsonPathExpression": "MFSOURCETYPE",
   	 "JsonPathMatch": "SMF030",
  	},
  "ProcessType": "JsonPathFilter"
}