It looks like there is a problem with the "in" operator when the array being searched only contains one element. In the below example field "foo1" isn't added:
if ( "foo" in ["foo"] ) {
mutate { add_field => ["foo1", "nope"] }
}
Here it works (field "foo2" is correctly added):
if ( "foo" in ["foo", "bar"] ) {
mutate { add_field => ["foo2", "yep"] }
}
Hi,
Running Logstash 2.2.1.
It looks like there is a problem with the "in" operator when the array being searched only contains one element. In the below example field "foo1" isn't added:
Here it works (field "foo2" is correctly added):
Am I missing something?