Split array fields in logstash

You can use the same algorithm, just don't call split on the field. Or better yet, call the array's index function. It returns the index in the array where the specified element is found.

event['IndexValue'] = event['id'].index(7)

This isn't a Ruby forum so I'll stop here.

Well thank you for your support and help. The issue got resolved.
Your community is so responsive and helpful which is one of the reason I prefer using ELK stack.

Though I have a new issue, but I will start a seprate chain for it.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.