Receiving multiple json events as one from third party application

aitymm — Sat, 19 Dec 2020 17:25:41 GMT

Hi everyone,

I`m receiving multiple JSON events as one event from third party application as showned below.

{"metric":"host1.adapter.DEMO.ALL.in.error","event":"metric","type":"m","value":0} {"metric":"host1.adapter.DEMO.ALL.in.filter","event":"metric","type":"m","value":0} {"metric":"host1.adapter.DEMO.ALL.in.total","event":"metric","type":"m","value":996} {"metric":"host1.adapter.DEMO.ALL.out.error","event":"metric","type":"m","value":0} {"metric":"host1.adapter.DEMO.ALL.out.total","event":"metric","type":"m","value":996}

I tried to use spath & mvexpand commands, to split it to a separate events. But couldn`t get results as i expected.
Finnaly, i need to apply my search to get total count by separate metric value as shown below:

here is my props.conf lines:

[adapter:json]
INDEXED_EXTRACTIONS = json
KV_MODE = none
AUTO_KV_JSON = false

Any help is appreciated.

topic Receiving multiple json events as one from third party application in Getting Data In

Receiving multiple json events as one from third party application