Json Array Problem

Hi everyone,

The sample log I sent to Elastic is below.

Although the value of a ‘Statement’ field is null, when I assign ‘key’ as a row in the dashboard, it shows the value of another Statement field instead of showing null. How can I solve this?

Thanks in advance for help.

{
  "agent": {
    "name": "st-esagent01",
    "id": "49d47611-0a1f-4951-1afe-25ea86dadf4a",
    "ephemeral_id": "1611ef88-041b-4aa5-84f0-1093a38494e3",
    "type": "filebeat",
    "version": "8.17.0"
  },
  "request_type": 0,
  "user_name": "mobile",
  "elastic_agent": {
    "id": "49d47611-0a1f-4951-1afe-25ea86dadf4a",
    "version": "8.17.0",
    "snapshot": false
  },
  "language_id": 1,
  "execution_tree_object": [
    {
      "Response": {
        "EndTime": "0001-01-01T00:00:00",
        "Results": [],
        "IsInitialized": true,
        "StartTime": "2025-01-08T16:49:24.4665785+03:00",
        "Success": true,
        "Key": "777",
        "GottenFromCache": false,
        "BusinessKey": 0
      },
      "EndTime": "2025-01-08T16:49:24.4665785+03:00",
      "Results": [],
      "Statement": null,
      "StartTime": "2025-01-08T16:49:24.4665785+03:00",
      "Success": true,
      "Key": "Orchestration.Authentication.Test"
    },
    {
      "Response": {
        "EndTime": "0001-01-01T00:00:00",
        "Results": [],
        "IsInitialized": true,
        "StartTime": "2025-01-08T16:49:24.4665785+03:00",
        "Success": true,
        "Key": "888",
        "GottenFromCache": false,
        "BusinessKey": 0
      },
      "EndTime": "2025-01-08T16:49:24.4665785+03:00",
      "Results": [],
      "Statement": "SqlQuery=Test @UserName = 'test'",
      "StartTime": "2025-01-08T16:49:24.4665785+03:00",
      "Success": true,
      "Key": "Data.ExecuteTest"
    },
    {
      "Response": {
        "EndTime": "0001-01-01T00:00:00",
        "Results": [],
        "IsInitialized": false,
        "StartTime": "2025-01-08T16:49:24.4665785+03:00",
        "Success": false,
        "Key": "999",
        "GottenFromCache": false,
        "BusinessKey": 0
      },
      "EndTime": "2025-01-08T16:49:24.4665785+03:00",
      "Results": [],
      "Statement": "UserIPAddress @UserName = 'test'",
      "StartTime": "2025-01-08T16:49:24.4665785+03:00",
      "Success": true,
      "Key": "Data.ExecuteTest"
    }
  ]
}