Getting data from Json Array
Hi
Im struggling to get data from an array of JSON objects, the arrays looks like this
[
{
"name":"test1",
"description":"test description 1",
"value":"134"
},
{
"name":"test2",
"description":"test description 2",
"value":"198"
}
]
Using this search seems to get me close, but give me repeating data:
(_collector="DemoColl")
| json auto
| json "log..name" as name
| json "log..value" as value
| parse regex field=name "\"(?<name>.*?)\"", regex field=value "\"(?<value>.*?)\"" multi
| count name, value
| fields - _count
I get data with repeating keys, what im after is one line per record in the array.
Any pointers would be great
Please sign in to leave a comment.
Comments
0 comments