Filter elements based on array constant or array environment variable

In general you cannot. logstash will treat the substituted environment variable as a string, not an array. There is a very specific case (plugin options that use :list => true and :validate => :uri) where it will get converted to an array but that is the only case that I know of.

1 Like