Filebeat not reading JSON Array

I have "sourceIPs":[""] in my JSON Logs, I am using drop_events processor conditions like "equals" and "contains" to filter out events having as sourceIP but none of the obvious filters seems to work. Filebeat version - 5.5.

sourceIPs.0: "" or tried this filter as well - sourceIPs[0]: ""
but no luck.

Any help would be highly appreciated.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.