My log body contains just valid json serialized string. I attempted to follow this instruction to set up json parser expression:
parse "*" as jsonobject | json field=jsonobject "transactionId"
but the rule validator keeps rejecting my parse expression.
Can sumo experts here help me understand what I have done wrong? Thanks.
Please sign in to leave a comment.