Follow-up from discussion here https://discuss.elastic.co/t/header-transform-concern-need-help/269064/19.
There does not seem to be any good way or workaround to create a body with a single value list.
The append documentation states:
https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-httpjson.html#_append
Appends a value to a list. If the field does not exist, the first entry will be a scalar value, and subsequent additions will convert the value to a list.
Relevant code is here: https://github.com/elastic/beats/blob/master/x-pack/filebeat/input/httpjson/internal/v2/transform_append.go#L136
Follow-up from discussion here https://discuss.elastic.co/t/header-transform-concern-need-help/269064/19.
There does not seem to be any good way or workaround to create a body with a single value list.
The append documentation states:
https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-httpjson.html#_append
Appends a value to a list. If the field does not exist, the first entry will be a scalar value, and subsequent additions will convert the value to a list.Relevant code is here: https://github.com/elastic/beats/blob/master/x-pack/filebeat/input/httpjson/internal/v2/transform_append.go#L136