https://community.splunk.com/t5/All-Apps-and-Add-ons/Add-On-Builder-Event-Breaking-JSON-in-Custom-Python-Code/m-p/478349#M74736 <P>So admittedly my skills at writing Python are about the same as my skills would be at hitting a Randy Johnson fastball (yeah I'm not real successful at either, but sometimes I might get lucky...) but I need to know how to do what the REST builder can do in the Event Extraction settings where the JSON path can be entered to break events properly.</P> <P>So basically I need to know how to do this:</P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/8714iA3AFFDF3AD94B8A7/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P>In here:<BR /> <span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/8715iF47CCD0C9BE2FD10/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P>Any help or insight is much appreciated! Thanks!</P> Mon, 20 Apr 2020 14:52:33 GMT michael_schmidt 2020-04-20T14:52:33Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Add-On-Builder-Event-Breaking-JSON-in-Custom-Python-Code/m-p/478349#M74736 <P>So admittedly my skills at writing Python are about the same as my skills would be at hitting a Randy Johnson fastball (yeah I'm not real successful at either, but sometimes I might get lucky...) but I need to know how to do what the REST builder can do in the Event Extraction settings where the JSON path can be entered to break events properly.</P> <P>So basically I need to know how to do this:</P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/8714iA3AFFDF3AD94B8A7/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P>In here:<BR /> <span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/8715iF47CCD0C9BE2FD10/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P>Any help or insight is much appreciated! Thanks!</P> Mon, 20 Apr 2020 14:52:33 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Add-On-Builder-Event-Breaking-JSON-in-Custom-Python-Code/m-p/478349#M74736 michael_schmidt 2020-04-20T14:52:33Z