Present end of nested field as a part of value

Elastic Stack Elasticsearch
1

Hi,

I have records which could contain nested fields with a high depth.
And I want to convert part of the nested field to the part of the value.

What I have before

{
  "a":{
    "b":{
      "c":{
        "d":{
          "e":{
            "f":"some value"
          }
        }
      }
    }
  }
}

What I want as a result

{
  "a":{
    "b":{
      "c":"d.e.f:some value"
    }
  }
}

Is it possible to do?

2

Hi @ddoroshenko

I don't think that's possible.

3

@RabBit_BR after little research I've found that I can do it with json_encode Logstash filter

It will look like a json formatted string

{
  "a":{
    "b":{
      "c":"{\"d\":{\"e\":{\"f\":\"some value\"}}}"
    }
  }
}