How can I flatten an array in my document

[genehunter29009 (gene hunter)]

I am attempting to flatten an array either in logstash or ingestion processor.

"clientType" : "Desktop Browser",
"stringProperties" : [
{
"key" : "usertype",
"applicationId" : "Client",
"internalApplicationId" : "APPLICATION-89",
"value" : "R"
},
{
"key" : "firmid",
"applicationId" : "Client",
"internalApplicationId" : "APPLICATION-89",
"value" : "1"
},
{
"key" : "firmname",
"applicationId" : "Client",
"internalApplicationId" : "APPLICATION-89",
"value" : "ABC"
}

any help would be appreciated. I am having trouble figuring the best way to do this, ultimately I would like it to look like this

"clientType" : "Desktop Browser",
"stringProperty.usertype" : "R",

[Badger]

Use a ruby filter. I have not tested it but something like this...

ruby {
    code => '
        props = event.get("stringProperties")
        if props
            props.each { |x|
                key = x["key"]
                event.set("stringProperties.#{key}", x["value"])
            }
            event.remove("stringProperties")
        end
    }
}

[genehunter29009 (gene hunter)]

@Badger

ruby {
    code => '
        props = event.get("stringProperties")
        if props
            props.each { |x|
                key = x["key"]
                event.set("stringProperties.#{key}", x["value"])
            }
            event.remove("stringProperties")
        end
    }
}

thank you, will try it out and let you know.

[genehunter29009 (gene hunter)]

@Badger

code => '

I have never used ruby but I am getting an error does the string have an end?

code => 'start of string, but i see no end '

[Badger]

@Badger

       end
    }
}

That should be

        end
    '
}

[genehunter29009 (gene hunter)]

That worked perfectly thank you very much.