Hello
After getting the number of arrays and storing them in a custom field
To obtain array information using a custom field as an array parameter
I don't know how to expand custom fields.
Can anyone tell me?
sample code
ruby {
code => "event.set('arry_max',event.get('file_test').length - 1)"
}
mutate {
add_field =>["file_name_test" => "%{[file_name][%{arry_max}★←Bad]}"]
}