Logstash Create and Access Array

Question

I want to create an array in the logstash config file that is for devices and then access the array value by for a new field that I am creating. example:

filter {
     array_devicetype => ["Cisco ASA", "Cisco 3750"]
     mutate {
            add_field => { "Device Type" => "%{array_devicetype[0]}"
     }
}

Yet, no luck. Can someone help me out with this? Thanks.

Answer 1

If there is no any filter plugin can help you, you can try to use ruby and then do it yourself. For example

filter {
    ruby {
            code => "
                    event['array_devicetype'] = ['Cisco ASA', 'Cisco 3750']
                    event['Device Type'] = event['array_devicetype'][0]
            "
    }
}

Use this filter can do what you want. FYI.