Rename a field

Elastic Stack Elasticsearch
1

Hello,
I want to rename a field which is the result of static filter. it contains many values, I used "Rename" but it didn't work.
The field current name is: previous.employeeid

image

2

Hello,

You need to provide more context, share an example of how your document looks like.

Also, if the field previous.employeeid is a json object, with employeeid being nested under previous, in this way:

{ "previous": { "employeeid": "values" } }

Then, the correct way to make reference to this field in Logstash is using [previous][employeeid].

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.