I have a json file of a packet capture. It has multiple layers in 1 message as shown in below example.
block 1:
mtp3 = 1
map = 1
block 2:
mtp3 =2
bicc =2
When i process the file in logstash it combines the similar layers and display them in the same field.
mtp3: 1,2 , map: 1, bicc: 2
I want my bicc from block 2 to correspond to mtp3 of block2 but it gets related to mtp3 of block1 because it is taking as first instance for both in the respective arrays.
How do i get 1 to 1 relation for all layers in the same block??