Processors
Unroll Processor
Convert a JSON object array within a field into individual objects, commonly used when a source packages multiple events in a single JSON object.
Documentation Index
Fetch the complete documentation index at: /llms.txt
Use this file to discover all available pages before exploring further.
Convert a JSON object array within a field into individual objects, commonly used when a source packages multiple events in a single JSON object.
| Option | Description | Example |
|---|---|---|
| Field | The field containing the JSON object array to unroll. | .foo |
{
'foo': ['bat', 'baz', 'qux'],
'bar': 1
}
| Option | Value |
|---|---|
| Field | .foo |
{"bar": 1, "foo": "bat"}
{"bar": 1, "foo": "baz"}
{"bar": 1, "foo": "qux"}
Was this page helpful?