[filebeat] Add json parsing to filebeat

ansible/roles/filebeat/files/filebeat.yml

@@ -4,6 +4,14 @@ filebeat.inputs:
     paths:
       - "/var/log/*.log"
     exclude_lines: [".*mdnsd.*", ".*syslogd.*"]
+  - type: filestream
+    enabled: true
+    paths:
+      - "/var/log/*.json"
+    fields_under_root: true
+    json.message_key: message
+    fields:
+      tags: ["json"]
 
 filebeat.config.modules:
   path: ${path.config}/filebeat.modules.d/*.yml