query_structured_json.md

a way to query structured json

A structured log file where each line is a valid json string.

Example

{"level": "info", "message": "information message"}
{"level": "warn", "message": "warn message"}

This is how we can query the objects

cat 2022-02-07.log | jq -s 'map(select(.level | contains("info")))'

where .level is key-name and "info" is key-value