Logstash json input file only required fields to output

You could try

    mutate { rename => { "[data][item]" => "item" } }
    prune { whitelist_names => [ "item" ] }
1 Like