I have some documents like this:
{
\"hash\": \"14a076f9f6cecfc58339330eeb492e267f63062f6d5f669c7cdbfecf9eb4de32\",
\"started_services\": [],
\"deleted_file
db.key.aggregate((
{ "$match": {
"datetime_int": { "$gte": 1451952000 }
}},
{"$unwind":"$software.adobe.licenses"},
{"$project":{"key":"$software.adobe.licenses.key", "hash":1, "_id":0}}
))
outputs the following :
{ "hash" : "14a076f9f6cecfc58339330eeb492e267f63062f6d5f669c7cdbfecf9eb4de32", "key" : [ "2384723", "23888823" ] }