Flatten json array in Logstash

Elastic Stack Logstash
4

Thanks @jordansissel - good to know at least I'm not missing some obvious functionality :smile:
I tried your snippet (with the missing closing single quote added) with my existing simple config:

input {
    twitter {
        consumer_key => "foo"
        consumer_secret => "foo"
        oauth_token => "foo-foo"
        oauth_token_secret => "foo"
        keywords => ["foo","bar"]
        full_tweet => true
    }
}

filter {
          ruby {
            code => 'event["images"] = event["[entities][media]"].collect { |m| m["media_url"] }'
          }
}

output {
        elasticsearch { host => "localhost"  protocol => "http" index => "twitter"}
        stdout { codec => rubydebug }
        }

but got an error

Exception in filterworker {"exception"=>#<NoMethodError: undefined method `collect' for nil:NilClass>,

I'm no Ruby coder so I guess I'll have to leave this one here for now.

thanks again. Robin.