From 0b104ff0f0fb82e0870fd50e78b07fe3c3d7193a Mon Sep 17 00:00:00 2001 From: DeDe Morton Date: Wed, 27 Sep 2017 01:08:09 -0700 Subject: [PATCH] Add fix implemented in #4845 (#5253) --- libbeat/docs/processors-using.asciidoc | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/libbeat/docs/processors-using.asciidoc b/libbeat/docs/processors-using.asciidoc index e655cd5e2d9..22264095793 100644 --- a/libbeat/docs/processors-using.asciidoc +++ b/libbeat/docs/processors-using.asciidoc @@ -410,7 +410,7 @@ processors: fields: ["field1", "field2", ...] process_array: false max_depth: 1 - target: + target: "" overwrite_keys: false ----------------------------------------------------- @@ -423,7 +423,8 @@ arrays. The default is false. `target`:: (Optional) The field under which the decoded JSON will be written. By default the decoded JSON object replaces the string field from which it was read. To merge the decoded JSON fields into the root of the event, specify -`target` with an empty value (`target:`). +`target` with an empty string (`target: ""`). Note that the `null` value (`target:`) +is treated as if the field was not set at all. `overwrite_keys`:: (Optional) A boolean that specifies whether keys that already exist in the event are overwritten by keys from the decoded JSON object. The default value is false.