NSG FLow Log resourceID string with `/`'s are being treated as line breaks with a "" null at the start

I can;t tell if this is really and issue but it doesn't look great so thought I would log it to see what others think.

Part of the NSG Flow Log is the resourceID which includes a whole load of `/`'s . This issue is in even in a string these are processed as breaks so I think think the following is happening:

INTO LOGSTASH is the NSG Flowlog JSON with the following:

`"resourceId":"/SUBSCRIPTIONS/9F29557E-15AE-465E-9DAC-67C4BCDD763B/RESOURCEGROUPS/USA1042-VDC-EASTUS/PROVIDERS/MICROSOFT.NETWORK/NETWORKSECURITYGROUPS/USA1042-NSG-EASTUS-BASE",`

OUT OF Logstash I think the following is being forwarded on, and so there is a "" null value at the start

`"resourceId":["","SUBSCRIPTIONS","9F29557E-15AE-465E-9DAC-67C4BCDD763B","RESOURCEGROUPS","USA1042-VDC-EASTUS","PROVIDERS","MICROSOFT.NETWORK","NETWORKSECURITYGROUPS","USA1042-NSG-EASTUS-EIS"]`

These is a chance Graylog is doing the conversion but as far as I can tell this is the Logstash processing given the / is a reserved character even in a string.

May not be anything but i would be interested how other people are (or aren't) dealing with it

Thanks

Hass