Skip nested json

[koti]

Hi

if the input json message having the nested json, I need to skip the processing the log .

Please suggest

[spinscale (Alexander Reelsen)]

Hey,

it is somewhat unclear to me, what exactly you are after? Two things come to mind here. First, you do not want to make a part of your JSON document searchable. If that is the case you mark it as enabled: false in the mapping. See https://www.elastic.co/guide/en/elasticsearch/reference/6.7/enabled.html

Second, you really want to drop a document, based on its content. You could use the drop processor to do this.

--Alex

[koti]

Hi Alex,

Thanks for you reply.
I have the log with below content as nested json . So i dont want to process /send to output xml . Can you please help me .
Thanks for your support

{
"sample": {
"someitem": {
"thesearecool": [
{
"neat": "wow"
},
{
"neat": "tubular"
}
]
}
}
}