AND Operator in JSON

belicoff — Tue, 29 Sep 2020 16:31:44 GMT

I have a Log System which Logs in JSON Format Like these:
{
"API_Name": "Get ID Cards",
"End Point": "/write/api/v1.1/sequoiauser/idcards",
"UserID": "ABC-123",
"Response": "",
"Error": "Logos attachment retrieval Failed"
}

{
"API_Name": "Get ID Cards",
"End Point": "/write/api/v1.1/sequoiauser/idcards",
"UserID": "XYZ-123",
"Response": "{"url" : "http://some-url"}",
"Error" : null
}

Now I want to view all documents where UserID is "ABC-123" and API_Name is "Get ID Cards".
Can anyone let me know how to achieve this?
I have added KV_MODE as json.

"API_Name" : "Get ID Cards" AND "UserID" : "ABC-123" query list even the doc which has "UserID" : "XYZ-123"

Re: AND Operator in JSON

alemarzu — Tue, 31 Oct 2017 13:12:42 GMT

Hi there @belicoff

Try like this.

your search | where UserID="ABC-123" AND API_Name="Get ID Cards"

Re: AND Operator in JSON

belicoff — Tue, 31 Oct 2017 13:29:19 GMT

Thanks, It Worked

topic AND Operator in JSON in Getting Data In

AND Operator in JSON

Re: AND Operator in JSON

Re: AND Operator in JSON