Concatenate / join values of tags into one field

[S-elk]

hello!

i want to join all the tags field values into one new field?

can i do that with join mutate filter ?

if not, how can i do that ?

example :

tags = ["1","2","3"]
new_field = "123"

thanks in advanced!

p.d. is my first post. if i did something wrong im sorry.

[Badger]

I would do that in ruby

    ruby {
        code => '
            tags = event.get("tags")
            if tags.is_a? Array
                event.set("newfield", tags.join)
            end
        '
    }

[S-elk]

Wow thank you so much!! thanks for the speed of response!