If that is really what you want (which seems unlikely) then you could use
input { generator { count => 1 lines => [ '{"sender_domain": [ "example11.com", "example12.com", "test.org"] }' ] codec => json } }
filter {
mutate {
# Get rid of commas between entries
join => { "sender_domain" => "" }
}
}
output {
http {
ssl_enabled => false
format => message
message => "%{sender_domain}"
url=> "http://127.1.1.1:2000/"
http_method => post
}
}
If you have a receiving pipeline
input { http { host => "127.1.1.1" port => 2000 } }
output { stdout {} }
then it will produce
"message" => "example11.comexample12.comtest.org",
If you leave out the mutate then the output will .to_s the array and produce
"message" => "example11.com,example12.com,test.org",