I am having an issue where the output from grok and other filters are producing fields with a literal '.' separator as opposed to the expected hierarchical JSON.
For example, I use the following pattern in my grok filter:
It will match successfully, but the JSON output is the following:
Where I would expect the following:
This is one example of many. I have other log sources NOT going through logstash to the same index with the same fields and the output IS how I would expect. Any idea what I may be doing wrong?