The syntax to access nested fields in Ruby filter is quite similar to the one we use in mutate filter
event['parent_field']['child_field']
Anh Le
Live or Exist?