[Filebeat S3] Change log.file.path to be nested object (#21624) (#21636)

(cherry picked from commit 030077c)
elastic · Oct 7, 2020 · 20cd0af · 20cd0af
1 parent 284ae18
commit 20cd0af
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/x-pack/filebeat/input/s3/collector.go b/x-pack/filebeat/input/s3/collector.go
@@ -556,8 +556,10 @@ func createEvent(log string, offset int, info s3Info, objectHash string, s3Ctx *
 		Fields: common.MapStr{
 			"message": log,
 			"log": common.MapStr{
-				"offset":    int64(offset),
-				"file.path": constructObjectURL(info),
+				"offset": int64(offset),
+				"file": common.MapStr{
+					"path": constructObjectURL(info),
+				},
 			},
 			"aws": common.MapStr{
 				"s3": common.MapStr{