If there are multiple entries in the Property array and you want to select one by name then you would need to iterate over the array. There are many ways to do that. I have not tested this one, it is just an example
ruby {
code => '
entry = event.get("[Event][Event1][Event2][Property]
if entry
index = entry.index { |x| x["name"] == "ABC" }
theOneYouWant = entry[index]
end
...
'
}
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.