Hi, I have a series of test executions compiled into a single JSON message every hour. I'm trying to extract the execution status of each test with the test's associated identifiers. My current query looks like this:
_sourceCategory="xxxx" and _collector="xxxx"
| json "executions[*].cycleId" as cycleId
| json "executions[*].versionId" as versionId
| json "executions[*].status.id" as status
| extract field=cycleId"(?<cycle>\d\d\d\d\d\d)" multi
| extract field=versionId"(?<version>\d\d\d\d\d)" multi
This should only generate 20 messages, as there are only 20 executions. However, it generates 400 messages instead. Is there a reason why it associates 20 versionIds for each cycleId? How can I generate only 20 messages, each populated with the corresponding cycleId and versionId? Can I also add the corresponding status to each of the 20 messages as well? Thanks!
Please sign in to leave a comment.