---
title: Extract array
description: The extract_array processor populates fields with values read from an array field. The following example will populate source.ip with the first element...
url: https://www.elastic.co/elastic/docs-builder/docs/3028/reference/beats/metricbeat/extract-array
products:
  - Beats
  - Metricbeat
applies_to:
  - Elastic Cloud Serverless: Preview
  - Elastic Stack: Preview
---

# Extract array
<warning>
  This functionality is in technical preview and may be changed or removed in a future release. Elastic will work to fix any issues, but features in technical preview are not subject to the support SLA of official GA features.
</warning>

The `extract_array` processor populates fields with values read from an array field. The following example will populate `source.ip` with the first element of the `my_array` field, `destination.ip` with the second element, and `network.transport` with the third.
```yaml
processors:
  - extract_array:
      field: my_array
      mappings:
        source.ip: 0
        destination.ip: 1
        network.transport: 2
```

The following settings are supported:
<definitions>
  <definition term="field">
    The array field whose elements are to be extracted.
  </definition>
  <definition term="mappings">
    Maps each field name to an array index. Use 0 for the first element in the array. Multiple fields can be mapped to the same array element.
  </definition>
  <definition term="ignore_missing">
    (Optional) Whether to ignore events where the array field is missing. The default is `false`, which will fail processing of an event if the specified field does not exist. Set it to `true` to ignore this condition.
  </definition>
  <definition term="overwrite_keys">
    Whether the target fields specified in the mapping are overwritten if they already exist. The default is `false`, which will fail processing if a target field already exists.
  </definition>
  <definition term="fail_on_error">
    (Optional) If set to `true` and an error happens, changes to the event are reverted, and the original event is returned. If set to `false`, processing continues despite errors. Default is `true`.
  </definition>
  <definition term="omit_empty">
    (Optional) Whether empty values are extracted from the array. If set to `true`, instead of the target field being set to an empty value, it is left unset. The empty string (`""`), an empty array (`[]`) or an empty object (`{}`) are considered empty values. Default is `false`.
  </definition>
</definitions>