Parsing- need help
I want to parse the below JSON logs to see the value for field LoadBalancerName and DNSName. I tried the below logic and it works but what if there are more than 5 values of LoadBalancerName in same array. How do I separate that? Please advise.
| json "[0].LoadBalancerName", "[1].LoadBalancerName" as lbn1, lbn2 nodrop
-
Official comment
Hey Aakif,
Parse regex multi will allow you to parse out as many values for LoadBalancerName as there are in each log:
https://help.sumologic.com/05Search/Search-Query-Language/01-Parse-Operators/02-Parse-Variable-Patterns-Using-Regex#Parse_multi
Let us know if this answers your question here, happy to assist!Comment actions
Please sign in to leave a comment.
Comments
2 comments