extract_array

extract_array #

CategoryScope
Transformrecord

The “extract_array” pipeline processor: pull one element (or flatten all elements as indexed fields) out of an array field (Vector’s parse arrays / beats extract_array equivalent).

Configuration #

FieldTypeDefaultDescription
fieldstringSource field to read from.
indexint0Destination index name.
targetstringDestination prefix or field to write the result to.

Example #

processor:
  - extract_array:
      field: "message"
      index: 10
      target: "parsed"
Edit Edit this page