I'm trying to figure out how to extract a series of possible entries in a single field into multiple new fields. My example data is below, coming from a CSV file. Is there a more simple solution to this than using RegEx?
This column is called "files_analyzed". What I want to do is be able to do something like this:
parse field=files_analyzed "Videos: *," as videos
parse field=files_analyzed "Files: *," as files
parse field=files_analyzed "Parents: *," as parent
In other words, I want new fields created called Files, Videos etc that will parse the number. For example, from the first row I would want a field called Files and in this field would be the value 209. I would then want another field called Videos and in that field the value 48, and so on.
If I try to stack these commands as I did in my example it doesn't seem to work because it is looking for a row with Files AND Videos AND Parents, etc instead of OR. Unless I'm misunderstanding how this works. Do I have to instruct SumoLogic to show me all results somehow?
Anyway, any guidance would be great. I can't figure this out. Thanks.
Please sign in to leave a comment.