I'm testing a ruby filter to build a small list of hosts that are producing less than a certain number of events per minute. Is there a standard method to get this output back into the event json? Currently I'm trying with the following code. The first line generates the list of nodes, the second …

Ruby Filter output to Field

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Ruby Filter output to Field