Hi I have created an array for family details.
filter {
mutate {
add_field => {"employee.family"=>"%{familyMember}"}
}
}
So in here employee.family =["mom", "son", "daughter"]
I created Visualisation on how many employees have sons, daughters etc.
But when i filter the dashboard employee.family:"son" it shows mom,father also.
This is because employees have both son and mother in array. But I need to show son value in dashboard.
Need a solution on this.