Logstask nested field problem

I would do that using dissect and kv filters. Something like this.