i'm trying to catch a nested field to add in a new field with mutate add_field
So, i have the follow data
"beat" => {
"name" => "LBR001001-172.net.mapfre.com.br",
"hostname" => "LBR001001-172.net.mapfre.com.br",
"version" => "6.6.1"
}
I want the nested field "name" or "hostname"
I tried the following way
mutate {
add_field => { "hostname" => [beat][hostname]}
}
and
mutate {
add_field => { "hostname" => "[beat][hostname]"}
}
and
mutate {
add_field => { "hostname" => "%{beat.hostname}"}
}
But...
I still can not get the field nested