# Update nested object in ElasticSearch
**URL:** https://discuss.elastic.co/t/update-nested-object-in-elasticsearch/200751
**Category:** Logstash
**Created:** [September 23, 2019, 8:23pm UTC](https://discuss.elastic.co/t/update-nested-object-in-elasticsearch/200751 "2019-09-23T20:23:59Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@MMH](https://discuss.elastic.co/u/MMH)
#### Post date: [September 23, 2019, 8:23pm UTC](https://discuss.elastic.co/t/update-nested-object-in-elasticsearch/200751/1 "2019-09-23T20:23:59Z")
In one of my pipelines I am using logstash with JSON input and output to Elasticsearch with `action => "update"`.
One of the document fields contains nested data type. If in input JSON I receive following:
> "nested\_field":{"ident":"1","someField":"someVal"}
I should update `nested_field`, find objct with value `1` in field `ident` and for this object update field `someField` to `someVal`.
Is such operation possible in Logstash?
---
### Author:  [@stefws](https://discuss.elastic.co/u/stefws)
#### Post date: [September 23, 2019, 8:55pm UTC](https://discuss.elastic.co/t/update-nested-object-in-elasticsearch/200751/2 "2019-09-23T20:55:12Z")
Yes it is...
```
filter {
# either conditional
if [nested_field][ident] == '1' {
# use any filter plugin to alter [nested_field][someField]
}
# or use the alter plugin
alter {
condrewriteother => [
"[nested_field][ident]", "1", "[nested_field][someField]", "new_value"
]
}
}
```
---
### Author:  [@MMH](https://discuss.elastic.co/u/MMH)
#### Post date: [September 23, 2019, 8:58pm UTC](https://discuss.elastic.co/t/update-nested-object-in-elasticsearch/200751/3 "2019-09-23T20:58:51Z")
Thank you for answer, but maybe I will describe my problem more through.
I have already in ElasticSearch document, with objects in `nested_field`. I need to update one of these objects (in ElasticSearch) using Logstash, but not to change other objects in `nested_field`.
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [September 23, 2019, 9:15pm UTC](https://discuss.elastic.co/t/update-nested-object-in-elasticsearch/200751/4 "2019-09-23T21:15:09Z")
I think you are looking for the [update\_by\_query](https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-update-by-query.html) API in elasticsearch. You can do that using a POST from an http filter, similar to the delete field script in the other thread.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 21, 2019, 9:15pm UTC](https://discuss.elastic.co/t/update-nested-object-in-elasticsearch/200751/5 "2019-10-21T21:15:10Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.