Flatten nested fields in a json object

[Benyamin_Dvoskin]

Hi,

we are having this issue with Kibana not displaying fields from nested objects correctly.
I've opened a topic in the Kibana discuss board, but eventually got to the understanding that this is a known and pending issue, as you can see in the mentioned thread:

Show nested values in json array\object

Hi, we have some documents that have nested objects, like the example attached. and for some reason, it doesn't show their values in kibana search tables. it used to work in Kibana3 with ES 1.x, but since we upgraded to latest versions of ELK, it doesn't work. any ideas? thanks, [image]

so until this is resolved if at all, i'm looking for a way to work around it using logstash.
I am sending json documents to ES with several levels of fields\objects.
so I guess that I need to flatten those in logstash, so that a field that looks like this for example:

"body": {
  "message": {
	"message": {
	  "mimeType": "text/plain"
	}
  }
}

will become the following string:

body.message.message.mimeType

any ideas?

thanks,