Processing JSON object with arrays using nested datatype


(acastellano) #1

Using the nested datatype for the below below JSON object still warns 'Object in arrays are not well supported'. Elasticsearch version is 5.5.2. Initially, I did not have 'nested' defined per every array within the JSON object structure, and thought that might have been the problem.

{
"data": {
"country": "US",
"resolutions": [
{
"last_resolved": "2017-05-19 00:00:00",
"hostname": "bizspa.co.za"
},
{
"last_resolved": "2017-05-19 00:00:00",
"hostname": "blessedcornerguesthouse.co.za"
},
{
"last_resolved": "2016-09-06 00:00:00",
"hostname": "cimrecords.co.za"
},
{
"last_resolved": "2016-12-02 00:00:00",
"hostname": "davidmascott.org"
},
{
"last_resolved": "2016-12-24 00:00:00",
"hostname": "eureka.org.za"
},
{
"last_resolved": "2016-10-29 00:00:00",
"hostname": "lebsimthattravelclub.co.za"
},
{
"last_resolved": "2016-08-13 00:00:00",
"hostname": "nandnspeedauto.co.za"
},
{
"last_resolved": "2017-09-22 00:00:00",
"hostname": "poseidoncapital.co.za"
},
{
"last_resolved": "2017-04-17 00:00:00",
"hostname": "rrrprojects.co.za"
},
{
"last_resolved": "2018-01-09 00:00:00",
"hostname": "selowa.co.za"
},
{
"last_resolved": "2016-11-11 00:00:00",
"hostname": "www.nandnspeedauto.co.za"
}
],
"detected_urls": [
{
"positives": 1,
"total": 64,
"url": "http://lebsimthattravelclub.co.za/",
"scan_date": "2017-06-02 09:32:23"
},
{
"positives": 4,
"total": 64,
"url": "http://lebsimthattravelclub.co.za/index.html",
"scan_date": "2017-05-30 20:13:20"
}
],
"response_code": 1,
"verbose_msg": "IP address in dataset"
},
"feed": "VirusTotal-Duplicate",
"time": "2018-02-11 18:41:47 EST"
},
{
"feed": "VirusTotal",
"data": {
"country": "US",
"response_code": 1,
"verbose_msg": "IP address in dataset",
"resolutions": [
{
"hostname": "bizspa.co.za",
"last_resolved": "2017-05-19 00:00:00"
},
{
"hostname": "blessedcornerguesthouse.co.za",
"last_resolved": "2017-05-19 00:00:00"
},
{
"hostname": "cimrecords.co.za",
"last_resolved": "2016-09-06 00:00:00"
},
{
"hostname": "davidmascott.org",
"last_resolved": "2016-12-02 00:00:00"
},
{
"hostname": "eureka.org.za",
"last_resolved": "2016-12-24 00:00:00"
},
{
"hostname": "lebsimthattravelclub.co.za",
"last_resolved": "2016-10-29 00:00:00"
},
{
"hostname": "nandnspeedauto.co.za",
"last_resolved": "2016-08-13 00:00:00"
},
{
"hostname": "poseidoncapital.co.za",
"last_resolved": "2017-09-22 00:00:00"
},
{
"hostname": "rrrprojects.co.za",
"last_resolved": "2017-04-17 00:00:00"
},
{
"hostname": "selowa.co.za",
"last_resolved": "2018-01-09 00:00:00"
},
{
"hostname": "www.nandnspeedauto.co.za",
"last_resolved": "2016-11-11 00:00:00"
}
],
"detected_urls": [
{
"total": 64,
"positives": 1,
"scan_date": "2017-06-02 09:32:23",
"url": "http://lebsimthattravelclub.co.za/"
},
{
"total": 64,
"positives": 4,
"scan_date": "2017-05-30 20:13:20",
"url": "http://lebsimthattravelclub.co.za/index.html"
}
]
},
"time": "2018-02-11 18:42:30 EST"
}


(system) #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.