# Split and access to array elements

**URL:** <https://discuss.elastic.co/t/split-and-access-to-array-elements/199689>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [September 16, 2019, 3:15pm UTC](https://discuss.elastic.co/t/split-and-access-to-array-elements/199689 "2019-09-16T15:15:11Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![matapo](https://avatars.discourse-cdn.com/v4/letter/m/49beb7/32.png) [@matapo](https://discuss.elastic.co/u/matapo)\
**Post date:** [September 16, 2019, 3:15pm UTC](https://discuss.elastic.co/t/split-and-access-to-array-elements/199689/1 "2019-09-16T15:15:11Z")

</div>

Hi,  
I am trying to split a field and to register each element of the given array in new fields (filebeat 7.3.1).  
`url.array` is well created as an array and contains my 2 elements. That's ok for that.

I've tried :

```auto
         {
            "split": {
                "field": "url.original",
                "separator": "\\?",
                "ignore_missing": true,
                "target_field": "url.array"
            }
        },
        {
            "set": {
                "field": "url.path",
                "value": " {{ctx.url.array[0] }}"
            }
        },

```

And also by using a processor :

```auto
 - extract_array:
    field: url.array
    mappings:
      url.path: 0
      url.query: 1
    ignore_missing: true
    omit_empty: true

```

But nothing is working 😕

Anyone could help please ?  
Thx

---

<div class="post-metadata">

**Author:** ![matapo](https://avatars.discourse-cdn.com/v4/letter/m/49beb7/32.png) [@matapo](https://discuss.elastic.co/u/matapo)\
**Post date:** [October 11, 2019, 2:02pm UTC](https://discuss.elastic.co/t/split-and-access-to-array-elements/199689/2 "2019-10-11T14:02:56Z")

</div>

Finally I switched to logstash to be able to do more complex actions on logs.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 8, 2019, 2:03pm UTC](https://discuss.elastic.co/t/split-and-access-to-array-elements/199689/3 "2019-11-08T14:03:04Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.