{\\n %{GREEDYDATA:p1} %{WORD:c1};\\n %{GREEDYDATA:p2} %{WORD:c2};\\n %{GREEDYDATA:p3} %{WORD:c3};\n}
will give you this
{
"c3": "roll",
"p1": "optional int64",
"p2": "optional double",
"p3": "required binary",
"c1": "name",
"c2": "score"
}
then you can do mutate to add field called columns
mutate { add_field => { "columns" => "%{c1},%{c2},%{c3}" } }
this will give you columns => "name,score,roll" but this is not nested json. it is single field.
if you are asking for columns[0], columns[1] then it is array not nested jason
nested json is I think
columns { key1: name, key2:score, key3:roll }
then you can refrerence then by columns.key1, columen.key2 etc...