ruby { code => "event.set('[day_of_week]',event.get('@timestamp').time.strftime('%a'))" }
gets me
"day_of_week" => "Mon"
What synxtax error do you get?
You can format posts using markdown. In particular code and syntax highlighting. The </> button in the toolbar above the edit panel will indent your code by four spaces for you.