Logstash using KV filter creating a field with an array rather than individual fields and individual values

It is certainly possible. This thread is about a slightly different question, but should give you an idea of how to do it.