Concatenate / join values of tags into one field


i want to join all the tags field values into one new field?

can i do that with join mutate filter ?

if not, how can i do that ?

example :

tags = ["1","2","3"]
new_field = "123"

thanks in advanced!

p.d. is my first post. if i did something wrong im sorry.

I would do that in ruby

    ruby {
        code => '
            tags = event.get("tags")
            if tags.is_a? Array
                event.set("newfield", tags.join)

Wow thank you so much!! thanks for the speed of response!

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.