- X-Pack Reference for 6.0-6.2 and 5.x:
- Introduction
- Setting Up X-Pack
- Breaking Changes
- X-Pack APIs
- Graphing Connections in Your Data
- Profiling your Queries and Aggregations
- Reporting from Kibana
- Securing the Elastic Stack
- Getting Started with Security
- How Security Works
- Setting Up User Authentication
- Configuring SAML Single-Sign-On on the Elastic Stack
- Configuring Role-based Access Control
- Auditing Security Events
- Encrypting Communications
- Restricting Connections with IP Filtering
- Cross Cluster Search, Tribe, Clients and Integrations
- Reference
- Monitoring the Elastic Stack
- Alerting on Cluster and Index Events
- Machine Learning in the Elastic Stack
- Troubleshooting
- Getting Help
- X-Pack security
- Can’t log in after upgrading to 6.2.4
- Some settings are not returned via the nodes settings API
- Authorization exceptions
- Users command fails due to extra arguments
- Users are frequently locked out of Active Directory
- Certificate verification fails for curl on Mac
- SSLHandshakeException causes connections to fail
- Common SSL/TLS exceptions
- Internal Server Error in Kibana
- Setup-passwords command fails due to connection failure
- X-Pack Watcher
- X-Pack monitoring
- X-Pack machine learning
- Limitations
- License Management
- Release Notes
WARNING: Version 6.2 of the Elastic Stack has passed its EOL date.
This documentation is no longer being maintained and may be removed. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.
Array Compare Condition
editArray Compare Condition
editUse array_compare
to compare an array of values in the execution context to a
given value. See Supported Comparison Operators
for the operators you can use.
Using an Array Compare Condition
editTo use the array_compare
condition, you specify the array in the execution
context that you want to evaluate, a comparison
operator, and the value you want to compare against. Optionally, you
can specify the path to the field in each array element that you want to
evaluate.
For example, the following array_compare
condition returns true
if there
is at least one bucket in the aggregation that has a doc_count
greater
than or equal to 25:
{ "condition": { "array_compare": { "ctx.payload.aggregations.top_tweeters.buckets" : { "path": "doc_count", "gte": { "value": 25, } } } } }
The path to the array in the execution context that you want to evaluate, specified in dot notation. |
|
The path to the field in each array element that you want to evaluate. |
|
The comparison operator to use. |
|
The comparison value. Supports date math like the compare condition. |
Array-Compare Condition Attributes
editName | Description |
---|---|
|
The path to the array in the execution
context, specified in dot notation.
For example, |
|
The path to the field in each array element
that you want to evaluate. For example,
|
|
How many matches are required for the
comparison to evaluate to |
|
The value to compare against. |