Kubesense
Logs/Log Pipelines/Parse JSON Field

Parse JSON Field

The Parse JSON Field rule converts a field containing a JSON string into a JSON object.

When to Use

  • A structured payload is embedded as an escaped JSON string.
  • Later rules need to target values inside that payload.
  • You want parsed values available as searchable attributes.

Fields

FieldRequiredDescription
NameYesRule identifier
Source FieldYesField containing the JSON string
Merge / OverwriteYesWhether parsed keys merge with or replace destination content
Destination FieldYesField that receives the parsed object
Keep / DeleteYesWhether to retain the original source field

Parse JSON Field rule

Place this rule before rules that need the parsed attributes. If Protect targets one of those attributes, use its flattened path and keep Protect last.

ON THIS PAGE