# Removing parent fields and keeping nested fields of JSON
**URL:** https://discuss.elastic.co/t/removing-parent-fields-and-keeping-nested-fields-of-json/90624
**Category:** Logstash
**Created:** [June 23, 2017, 11:15am UTC](https://discuss.elastic.co/t/removing-parent-fields-and-keeping-nested-fields-of-json/90624 "2017-06-23T11:15:22Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@sachiiit](https://discuss.elastic.co/u/sachiiit)
#### Post date: [June 23, 2017, 11:15am UTC](https://discuss.elastic.co/t/removing-parent-fields-and-keeping-nested-fields-of-json/90624/1 "2017-06-23T11:15:22Z")
I am getting the following event in my filter section
```
{
"@timestamp" => 2017-06-23T06:16:05.000Z,
"@version" => "1",
"event" => {
"logLevel" => "INFO",
"description" => "This is description",
"className" => "ClassName",
"eventType" => "TEST_EVENT"
}
}
```
I want to remove event parent from the json. Output expected
```
{
"@timestamp" => 2017-06-23T06:16:05.000Z,
"@version" => "1",
"logLevel" => "INFO",
"description" => "This is description",
"className" => "ClassName",
"eventType" => "TEST_EVENT"
}
```
Any help would be appreciated.
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [June 26, 2017, 11:19am UTC](https://discuss.elastic.co/t/removing-parent-fields-and-keeping-nested-fields-of-json/90624/2 "2017-06-26T11:19:07Z")
If the number of subfields is known just use a mutate filter's rename option. Otherwise you'll have to use a ruby filter. I'm sure examples have been posted in the past.
---
### Author:  [@sachiiit](https://discuss.elastic.co/u/sachiiit)
#### Post date: [July 5, 2017, 12:47am UTC](https://discuss.elastic.co/t/removing-parent-fields-and-keeping-nested-fields-of-json/90624/3 "2017-07-05T00:47:57Z")
Thanks
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 2, 2017, 12:48am UTC](https://discuss.elastic.co/t/removing-parent-fields-and-keeping-nested-fields-of-json/90624/4 "2017-08-02T00:48:26Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.