Indent any json file nested fields and make it flat

Elastic Stack Logstash
2

You will need a ruby script. Create a file called flattenJSON.rb that contains

def register(params)
    @field = params['field']
end

def flatten(object, name, event)
    if object
        if object.kind_of?(Hash) and object != {}
            object.each { |k, v| flatten(v, "#{name}.#{k}", event) }
        else
            event.set(name, object)
        end
    end
end

def filter(event)
    o = event.get(@field)
    if o
        flatten(o, @field, event)
    end
    event.remove(@field)
    [event]
end

and then call it using

    ruby {
        path => "/home/user/flattenJSON.rb"
        script_params => { "field" => "body" }
    }