How to split an array in logstash which is of type string

Elastic Stack Logstash
1

I have a field dates as string but i need to convert it as an array and save to another filed lets say 'all dates'. How can i achieve this

dates:["2016-03-09T20:52:43","2016-03-09T21:23:32","2016-03-09T22:24:21"]

I tried using mutate and split in filter as below but it takes the square brackets at the beginning and end.
#mutate {

split => { "dates" => "," }

#}

2

I tried using mutate and split in filter as below but it takes the square brackets at the beginning and end.

What do you mean by this? Please give an explicit example.

3

The array is actually stored in database as a string type. So when i use split with delimiter ',' in logstash filter the '[' at the start and end of array are not being removed.

["2016-03-09T20:52:43","2016-03-09T21:23:32","2016-03-09T22:24:21"] after split the first element ["2016-03-09T20:52:43" and last element "2016-03-09T22:24:21"] has square brackets.

4

Oh. I suspect you'll be able to use the json filter to parse this. Just make sure you specify the name of the target field with the target option. Otherwise use a grok filter or a mutate filter's gsub option to remove the first and last square bracket.