ESA Rule Array/Collection error

[GubiczaT]

GROUP BY email_src
HAVING COUNT(*)>=1000;

Error message: 

Message: class java.lang.String cannot be cast to class java.util.Collection (java.lang.String and java.util.Collection are in module java.base of loader 'bootstrap')

 email_src is string[]

In this case i have only string[] type meta keys. 

In ESA Rule, can I convert string[] to string? Or any idea?

[EricaChalfin · Accepted solution]

@GubiczaT,.

Welcome to the RSA community! We are glad you joined us. This forum is specific for users of the SecurID and Identity Governance and Lifecycle products. From your question, it looks like you are working with NetWitness. You can register on the NetWitness community for assistance with your ESA Rule Array error.