Logstash, split field and remove field

Field names are case sensitive. data.tasks.data and Data.tasks.Data are different fields.

Also, if [data][tasks] is an array then that remove_field will not do anything. You need to include the array index in it, or else do something like this.