Remove a pattern from json nested fields

Elastic Stack Logstash
1

Hey guys,
i have the following json structure which i would like to rename from :

     json.detail.info.processed_event.instance_id	
     json.detail.info.processed_event.invalidations.metadata	
     json.detail.info.processed_event.invalidations.remote_schemas	 
     json.detail.info.processed_event.occurred_at

to

    json.processed_event.instance_id	
    json.processed_event.invalidations.metadata	
    json.processed_event.invalidations.remote_schemas	 
    json.processed_event.occurred_at

by removing [detailed][info] . Is it achievable without using a ruby script ?
Thanks !

2

If you have a fixed list of fields you could do it using mutate+rename. If you want to iterate over every field without knowing what they are called in advance then you will have to use ruby.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.