Forwarding logs through fluentd instance using the fluentdforward protocol and also using the json parsing there. Which work's fine.

Question:- Is there a way we can extract or filter the child fields of JSON logs instead of sending the content of the whole log.

For example, We have child fields under the structured parent field.

~~~
structured": {
      "ResponseInBytes": "xxxx",
      "RequestTime": "xxxx",
      "Host": "xxxx",
      "JSESSIONID": "-",
      "ClientIP": "xxxx",
~~~

But we want to send only particular fields like below. effectively just take every child object of the "structured" field.

~~~
      "RequestTime": "xxxx",
      "Host": "xxxx",
      "JSESSIONID": "-",
      "ClientIP": "xxxx",
~~~

Please let us know in case of any information is required.