Flatten array in message to multiple records

Follow

Gagan Goel

• July 05, 2021 11:16

I have logs of the format -

"keys{["a","b","c"]} user{1}"

I am using " | parse regex "keys\{\[(?<keys>.*?)\]\} user\{?<user>.*?\}".

This returns 1 record, How can i flatten it to multiple records, like -

a,1

b,1

c.1

0

• 

  Jason Nguyen

  • July 08, 2021 20:03

  Hello Gagan,

  For further investigate, can you please open a ticket with support by emailing support@sumologic.com and share the query link with all the details so we can provide assistance with your query.

  Thanks, Jason

  0

  Comment actions Permalink

Please sign in to leave a comment.