# add @map1 { ip saddr . ip daddr : meta mark } [ { "set": { "data": { "meta": { "key": "mark" } }, "elem": { "concat": [ { "payload": { "field": "saddr", "protocol": "ip" } }, { "payload": { "field": "daddr", "protocol": "ip" } } ] }, "map": "@map1", "op": "add" } } ] # add @map1 { ip saddr . ip daddr : meta mark } [ { "map": { "data": { "meta": { "key": "mark" } }, "elem": { "concat": [ { "payload": { "field": "saddr", "protocol": "ip" } }, { "payload": { "field": "daddr", "protocol": "ip" } } ] }, "map": "@map1", "op": "add" } } ]