Arrayname
To refer to an entire array, or imply that a field should be interpreted
as an array, specify the name of the array followed by square brackets
([]). This indicates to LogScale that the item refers
to the entire array.
logscale
tags[]
hosts[]
error_codes[]logscale
array:length(hosts[])
array:contains(tags[], value="production")
Functions using this Type:
array:dedup(), dropEvent(), eval(), fieldset()