Logstash Json Data processing issue

You can't have a field that is a keyword in some documents and an object in others. To resolve it you will need to either convert the field to an object when it is a keyword or convert the field to a keyword when it is an object. See this thread.