Parsing nested JSON in logstash

Elastic Stack Logstash
1

I'm facing an issue with indexing the following event in logstash.
{
"event_id" : 132,
"thread_id" : 5664,
"record_number" : "1270538",
"beat" : {
"hostname" : "my_host",
"version" : "5.4.2",
"name" : "events"
}
}

instead of indexing the fields as beat.hostname, i want to index it as just hostname

2

Use mutate+rename.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.