Convert dots in field names to nested objects

[jazzzz]

Because Elasticsearch 2 do not support dots in field names anymore, my Gelf logs with dots are not saved. This input plugin could convert fields with dots to objects.

Like

{
  "err.stack": "stack...",
  "err.file": "file",
  "err.line": 13
}

to

{
  "err": {
    "stack": "stack...",
    "file": "file",
    "line": 13
  }
}

[ph]

You might want to use https://github.com/logstash-plugins/logstash-filter-de_dot as a fallback until this plugin is fixed.

[jazzzz]

logstash-filter-de_dot works great for objects, but I have not found a way to convert arrays.

{
  "err.0": "err 1",
  "err.1": "err 2"
}

to

{
  "err": ["err 1", "err 2"]
}