I have an event stream which contains comma separated values which I wish to match into the the same field as an array without the comma.
An example might be.
[ value1, value2, val_ue3, val ue4, value5, value6]
The number of values can vary as can the presence of whitespace.
I'm looking for the most efficient way to add each value to the same field but as individual values in an array.
As far as I can see the KV and CSV filters will create multiple fields which I'm not looking for.
Is there a trick I'm overlooking.