How do you deal with nested JSON when creating a parser? I see that JSON filter does not support nested JSON.
How do you deal with nested JSON when creating a parser?
+4
+6- Bronze 2
Can you do something like this:
json {
source => "protoPayload.blah.nestedJsonField"
on_error => "not_json_nestedJsonField"
array_function => "split_columns"
target => "nestedJsonField"
}
Then just reference values off nestedJsonField (or whatever you rename your target to) as you would normally?
Login to the community
Login with SSO
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.