topic Re: How to search JSON data in Getting Data In

How to search JSON data

vbotnari1 — Mon, 08 Jul 2019 09:46:32 GMT

I am trying to parse this json using spath

 {  
       "Request":{  
          "Uri":"/api/...",
          "requestHeaders":[  

             {  
                "Key":"X-Real-IP",
                "Value":[  
                   "213.205.240.26, 55.145.164.26"
                ]
             },
             {  
                "Key":"X-Forwarded-For",
                "Value":[  
                   "111.111.240.26"
                ]
             },

          "ContentHeaders":[  
             {  
                "Key":"Content-Length",
                "Value":[  
                   "0"
                ]
             }
          ],
          "Body":null
       },
       "Response":{  },
       "TimeTakenMs":119
    }

I need to extract the first value for X-Real-IP. Any help is appreciated.

Re: How to search JSON data

FrankVl — Mon, 08 Jul 2019 09:51:54 GMT

What do you have so far and what exactly do you need help with?

Re: How to search JSON data

vbotnari1 — Mon, 08 Jul 2019 10:27:44 GMT

I tried to create a span path to the correct Key (X-Real-IP) but it didn't work, my experience with json paths is not great

Re: How to search JSON data

FrankVl — Mon, 08 Jul 2019 11:30:44 GMT

Looking at your data again: the difficulty is that X-Real-IP is not an actual json key that you can target with spath. It is the value of a field called Key.

You can extract this, but not with just using spath.

In this particular case a simple regex might be easier:

...
| rex "\"Key\":\"X-Real-IP\",\s*\"Value\":\[\s*\"(?<X_Real_IP>\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})"

https://regex101.com/r/ZObcvZ/1