You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Attempting to nest a key under a key that already exists results in duplicate keys.
Elasticsearch does not accept duplicate keys, meaning that the record cannot be indexed.
To Reproduce
fluent-bit configuration to reproduce the problem:
[SERVICE]
Flush 5
Daemon Off
Config_Watch On
[INPUT]
Name dummy
Tag dummy
Dummy {"key": "value", "nested": {"other_key": "value"}}
[FILTER]
Name nest
Match dummy
Operation nest
Wildcard key
Nest_under nested
[OUTPUT]
Name stdout
Match dummy
This results in the following data structure, as logged through stdout:
Bug Report
Describe the bug
Attempting to nest a key under a key that already exists results in duplicate keys.
Elasticsearch does not accept duplicate keys, meaning that the record cannot be indexed.
To Reproduce
fluent-bit configuration to reproduce the problem:
This results in the following data structure, as logged through stdout:
Expected behavior
No duplicate keys appear, resulting in the following data structure:
Your Environment
See the configuration snippet above.
Additional context
Because fluent-bit generates a data structure with duplicate keys, I cannot index some logs in Elasticsearch.
The text was updated successfully, but these errors were encountered: