WARNING: Version 5.6 of the Elastic Stack has passed its EOL date.
This documentation is no longer being maintained and may be removed. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.
array_compare to compare an array of values in the execution context to a
given value. See Supported Comparison Operators
for the operators you can use.
To use the
array_compare condition, you specify the array in the execution
context that you want to evaluate, a comparison
operator, and the value you want to compare against. Optionally, you
can specify the path to the field in each array element that you want to
For example, the following
array_compare condition returns
true if there
is at least one bucket in the aggregation that has a
than or equal to 25:
The path to the array in the execution
context, specified in dot notation.
The path to the field in each array element
that you want to evaluate. For example,
How many matches are required for the
comparison to evaluate to
The value to compare against.