For a case where there are multiple applications going through an ingest pipeline with many unique nested fields multiple levels deep, it would be helpful if there was an option just like max_depth
to limit how deep the JSON parsing would go.
for example:
{"order":{"id":1,"to":{"name":"Joe Smith"},"from":{"country":"United States","City":"San Jose"}},"message":"Problem X, please fix order."}
It would be great to have a max_depth
option as in Filebeat's decode_json_fields
processor.