# Packetbeat Processors - Dropping fields from nested objects in an array

**URL:** <https://discuss.elastic.co/t/packetbeat-processors-dropping-fields-from-nested-objects-in-an-array/282988>\
**Category:** Beats\
**Tags:** packetbeat\
**Created:** [September 1, 2021, 6:00am UTC](https://discuss.elastic.co/t/packetbeat-processors-dropping-fields-from-nested-objects-in-an-array/282988 "2021-09-01T06:00:21Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![yotamgod](https://avatars.discourse-cdn.com/v4/letter/y/73ab20/32.png) [@yotamgod](https://discuss.elastic.co/u/yotamgod)\
**Post date:** [September 1, 2021, 11:21am UTC](https://discuss.elastic.co/t/packetbeat-processors-dropping-fields-from-nested-objects-in-an-array/282988/4 "2021-09-01T11:21:30Z")

</div>

Also, here is the error I get:  
Failed to copy fields in copy\_fields processor: could not fetch value for key: dns.answers.data, Error: expected map but type is common.MapStr

I think it might have to do with the following issue:

> [@Using a processor in a filebeat module may or may not actually find fields](https://discuss.elastic.co/t/using-a-processor-in-a-filebeat-module-may-or-may-not-actually-find-fields/191461):
>
> (Elasticsearch and filebeat are both v7.2) I was encountering a lot of difficulty using the convert processor to change types, so I simplified things down to using rename. The results of my tests are confusing. Given the following config block, I'd expect 6 fields to get renamed: - module: osquery result: enabled: true input: processors: - rename: fields: - from: "input.type" to: "input.typerenamed" - from: "fileset.name" …

---

_[View the full topic](https://discuss.elastic.co/t/packetbeat-processors-dropping-fields-from-nested-objects-in-an-array/282988)._