Array of expressions

An array containing multiple CQL expressions that can be evaluated independently. Each expression in the array can represent a field reference, function call, calculation, or any valid CQL syntax that produces a value.

Arrays of expressions are commonly used in functions that need to process multiple field transformations or calculations in parallel, such as when applying the same operation to several fields or creating multiple derived values from input data.

For example, [lower(source.user.name), lower(destination.user.name)] creates an array with two expressions that each convert a field to lowercase, useful for case-insensitive comparisons across multiple fields.

Array of field transformations
logscale
[lower(username), lower(hostname)]
Array of calculations
logscale
[bytes * 8, packets * 1024]
Array of conditional expressions
logscale
[if(status<400, then="success", else="error"), 
 if(bytes>1000, then="large", else="small")]

Functions using this Type: array:append(), coalesce(), dropEvent(), eval(), fieldset()