FileBeat filestream ndjson breaking array with nested objects

Elastic Stack Beats
1

Hello,
I have ndjson which is scraped by filebeat, transferred via redis and logstash (which has no filter rule, except date) into elasticsearch.

The ndjson structure is smth like:

{
"array_of_objects": [
        { "attr1": true, "attr2": 42 },
        { "attr1": false, "attr2": 43 },
        { "attr1": true, "attr2": 44 }
    ]
...
}

The object is transformed into:

{
"array_of_objects.attr1": [ true, false, true ],
"array_of_objects.attr2": [ 42, 43, 44 ]
...
}

Is there a possibility to disable this transformation?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.