[Filebeat S3] Change log.file.path to be nested object (#21624) (#22672)

(cherry picked from commit 030077c) Co-authored-by: kaiyan-sheng <kaiyan.sheng@elastic.co>
elastic · Nov 19, 2020 · 0a06a03 · 0a06a03
1 parent 651093e
commit 0a06a03
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/x-pack/filebeat/input/s3/collector.go b/x-pack/filebeat/input/s3/collector.go
@@ -552,8 +552,10 @@ func createEvent(log string, offset int, info s3Info, objectHash string, s3Ctx *
 		Fields: common.MapStr{
 			"message": log,
 			"log": common.MapStr{
-				"offset":    int64(offset),
-				"file.path": constructObjectURL(info),
+				"offset": int64(offset),
+				"file": common.MapStr{
+					"path": constructObjectURL(info),
+				},
 			},
 			"aws": common.MapStr{
 				"s3": common.MapStr{