I believe this is happening because the notation used is interpreted as a JSON object path. For example, take a look at flat_settings.
I believe that the processor is expecting your document to look something like this:
{
"_index": "original-index-2020.11",
"_type": "_doc",
"_id": "7K27Bas23a",
"_version": 1,
"_score": null,
"_source": {
"http”: {
"request": {
"auth": "-",
"uri": "/xxxxx"
}
},
"test": {
"type": "SOFTWARE",
"status": true
},
...
Here’s a seemingly related forum post How to handle dot in field names in ES 7.0.
I think you may have to change the field names.