Brandon Free
- Total activity 10
- Last activity
- Member since
- Following 0 users
- Followed by 0 users
- Votes 0
- Subscriptions 3
Activity overview
Latest activity by Brandon Free-
Brandon Free commented,
Is this all one message? I think dedup or count distinct would require these to be separate, which may be able to be done using multi line processing on the source.If not I think you'd have to sepa...
-
Brandon Free created a post,
Using variables as json key parsing
Is it possible to use fields as variables in the query language? Specifically in parsing JSON in this case?Here is an example, let's say the full key name is not always obvious and needs to be extr...
-
Brandon Free commented,
Getting some indication that we may be able to use multi-line processing without the new lines if the regex matches up with everything in the message using | or conditions. Tried making a regex for...
-
Brandon Free commented,
Looks like it accepts that if I escape the brackets, but it still doesn't do anything:("\/([^"]*)":\{"availabilityState":([^\}{3}]).*?\}{3})
-
Brandon Free commented,
I've found this regex will group the objects I'm intersted in, however it's not accepted as a boundary regex as it is "invalid or contains restricted patterns"("\/([^"]*)":{"availabilityState":([^}...
-
Brandon Free commented,
Updated with some more detail about the JSON object and issues I've found when trying to do multi-line processing.
-
Brandon Free created a post,
Control where sumo logic splits data for large message log
I have app pool data streaming from an F5 load balancer that gets sent in the form of a large JSON object. The JSON object is larger than the maximum message size for Sumo Logic and gets split betw...