Processing JSON object with arrays using nested datatype

Using the nested datatype for the below below JSON object still warns 'Object in arrays are not well supported'. Elasticsearch version is 5.5.2. Initially, I did not have 'nested' defined per every array within the JSON object structure, and thought that might have been the problem.

{
"data": {
"country": "US",
"resolutions": [
{
"last_resolved": "2017-05-19 00:00:00",
"hostname": "bizspa.co.za"
},
{
"last_resolved": "2017-05-19 00:00:00",
"hostname": "blessedcornerguesthouse.co.za"
},
{
"last_resolved": "2016-09-06 00:00:00",
"hostname": "cimrecords.co.za"
},
{
"last_resolved": "2016-12-02 00:00:00",
"hostname": "davidmascott.org"
},
{
"last_resolved": "2016-12-24 00:00:00",
"hostname": "eureka.org.za"
},
{
"last_resolved": "2016-10-29 00:00:00",
"hostname": "lebsimthattravelclub.co.za"
},
{
"last_resolved": "2016-08-13 00:00:00",
"hostname": "nandnspeedauto.co.za"
},
{
"last_resolved": "2017-09-22 00:00:00",
"hostname": "poseidoncapital.co.za"
},
{
"last_resolved": "2017-04-17 00:00:00",
"hostname": "rrrprojects.co.za"
},
{
"last_resolved": "2018-01-09 00:00:00",
"hostname": "selowa.co.za"
},
{
"last_resolved": "2016-11-11 00:00:00",
"hostname": "www.nandnspeedauto.co.za"
}
],
"detected_urls": [
{
"positives": 1,
"total": 64,
"url": "http://lebsimthattravelclub.co.za/",
"scan_date": "2017-06-02 09:32:23"
},
{
"positives": 4,
"total": 64,
"url": "http://lebsimthattravelclub.co.za/index.html",
"scan_date": "2017-05-30 20:13:20"
}
],
"response_code": 1,
"verbose_msg": "IP address in dataset"
},
"feed": "VirusTotal-Duplicate",
"time": "2018-02-11 18:41:47 EST"
},
{
"feed": "VirusTotal",
"data": {
"country": "US",
"response_code": 1,
"verbose_msg": "IP address in dataset",
"resolutions": [
{
"hostname": "bizspa.co.za",
"last_resolved": "2017-05-19 00:00:00"
},
{
"hostname": "blessedcornerguesthouse.co.za",
"last_resolved": "2017-05-19 00:00:00"
},
{
"hostname": "cimrecords.co.za",
"last_resolved": "2016-09-06 00:00:00"
},
{
"hostname": "davidmascott.org",
"last_resolved": "2016-12-02 00:00:00"
},
{
"hostname": "eureka.org.za",
"last_resolved": "2016-12-24 00:00:00"
},
{
"hostname": "lebsimthattravelclub.co.za",
"last_resolved": "2016-10-29 00:00:00"
},
{
"hostname": "nandnspeedauto.co.za",
"last_resolved": "2016-08-13 00:00:00"
},
{
"hostname": "poseidoncapital.co.za",
"last_resolved": "2017-09-22 00:00:00"
},
{
"hostname": "rrrprojects.co.za",
"last_resolved": "2017-04-17 00:00:00"
},
{
"hostname": "selowa.co.za",
"last_resolved": "2018-01-09 00:00:00"
},
{
"hostname": "www.nandnspeedauto.co.za",
"last_resolved": "2016-11-11 00:00:00"
}
],
"detected_urls": [
{
"total": 64,
"positives": 1,
"scan_date": "2017-06-02 09:32:23",
"url": "http://lebsimthattravelclub.co.za/"
},
{
"total": 64,
"positives": 4,
"scan_date": "2017-05-30 20:13:20",
"url": "http://lebsimthattravelclub.co.za/index.html"
}
]
},
"time": "2018-02-11 18:42:30 EST"
}

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.