Skip to content

VRL emitting multiple events loses event metadata? #14881

Answered by sbalmos
sbalmos asked this question in Q&A
Discussion options

You must be logged in to vote

This feels weird, but I guess this is what unnest() really is for? I've sort of reduced it down to the following now...

.message = parse_json!(.message).records
. = unnest!(.message)

Note that if you did

.message = parse_json!(.message)
. = unnest!(.message.records)

You'd end up with multiple events properly, but message would have a single child object records that then contained the record data.

Replies: 1 comment

Comment options

You must be logged in to vote
0 replies
Answer selected by sbalmos
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
Q&A
Labels
None yet
1 participant