Not able to index array in logstash

Elastic Stack Logstash
1

As it says, Logstash is not able to index array of strings or any kind of string for that matter.
eg. - country :["some_name"] is not mapped while country: '["some_name"]' is indexed although it is showing the unmapped field in log_entry .
logstash.conf

input {
  mongodb {
    uri => "mongo_uri"
    placeholder_db_dir => "/usr/share/logstash/"
    placeholder_db_name => "logstash_sqlite.db"
    collection => "test"
    batch_size => 50000
  }
}

 

filter {
  mutate {
    remove_field => ["_id"]
  }
}
output {
  elasticsearch {
    hosts => ["http://ip:9200/"]
    index => "test"
  }
2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.