After Split again merge the json object

Elastic Stack Logstash
1

Hi Team,

I am splitting the data and mutate the fields but i want to again merge the objects so filter {
if [data] {

    split {
      field => "data"
      target => "indexData"
    }
    if !("" in [indexData][bcd]) {
      mutate { add_field => {"[indexData][type]" => "CD"} }
    }
     if !("" in [indexData][env]) {
      mutate { add_field => {"[@metadata][target_index]" => "wtf-index"} }
    } else {
      mutate {
        add_field => { "[@metadata][target_index]" => "%{[indexData][env]}wtf-index" }
      }
    }

after this i want to again merge all indexData in json so is there any solution..??

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.