Company
Date Published
Author
Aaron Mildenstein
Word count
592
Language
-
Hacker News points
None

Summary

The de_dot filter was introduced to address a compatibility issue between Logstash 2.0 and Elasticsearch 2.0, as the latter does not support field names containing dots. This filter replaces dots with underscores or any specified separator, allowing users to maintain compatibility without altering source field names. It also offers an option to translate dotted fields into nested fields by setting a configuration parameter, providing flexibility in data structuring. Users can specify which fields to process to optimize performance, especially when dealing with nested fields. The filter aims to ease the transition to the new Logstash and Elasticsearch versions by mitigating the challenges posed by dotted field names. Users are encouraged to engage with the community for support and to provide feedback on the filter's functionality.