# Asking how to nested logstash

**URL:** <https://discuss.elastic.co/t/asking-how-to-nested-logstash/343826>\
**Category:** Elasticsearch\
**Tags:** ilm-index-lifecycle-management, reindex\
**Created:** [September 26, 2023, 3:47am UTC](https://discuss.elastic.co/t/asking-how-to-nested-logstash/343826 "2023-09-26T03:47:33Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Shi\_Eng\_Ng](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shi_eng_ng/32/126011_2.png) [@Shi\_Eng\_Ng](https://discuss.elastic.co/u/Shi_Eng_Ng)\
**Post date:** [September 26, 2023, 3:47am UTC](https://discuss.elastic.co/t/asking-how-to-nested-logstash/343826/1 "2023-09-26T03:47:33Z")

</div>

"archives\_id": null,  
"level\_of\_detail": null,  
"items": [  
{  
"barcode": "000892",  
"brn": "4188",  
"collection": "["Books"]",  
"updated\_time": "2023-09-13 11:36:56.000000",  
"suffix": "LAI",  
"status": "Available",  
"availability": "Yes",  
"location": "Rotunda Library & Archive",  
"class\_number": "759.95957"  
},  
{  
"barcode": "001445",  
"brn": "4188",  
"collection": "["Books"]",  
"updated\_time": "2023-09-13 11:36:56.000000",  
"suffix": "LAI",  
"status": "On-Loan",  
"availability": "No",  
"location": "Rotunda Library & Archive",  
"class\_number": "759.95957"  
}  
],  
"seriestitle": null,

the collection is not in array, how to code in filter{} in logstash config file  
i can't relly solve it  
I need the collection data is in array and place inside the items: [{}]  
Example:  
items: [  
{  
collection: [  
"Books"  
]  
]

I search from other pages that ask to use remove\_field or split... but not really works for me  
Can anyone please help me with this?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 24, 2023, 3:48am UTC](https://discuss.elastic.co/t/asking-how-to-nested-logstash/343826/2 "2023-10-24T03:48:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.