<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Solved In another topic - How to parse JSON to Text in Alerting</title>
    <link>https://community.splunk.com/t5/Alerting/Solved-In-another-topic-How-to-parse-JSON-to-Text/m-p/506282#M9197</link>
    <description>&lt;P&gt;Hi everyone, I am trying to parse a json data to a plain text formatted to use it in an email alert.&lt;/P&gt;&lt;P&gt;Here is my JSON:&lt;/P&gt;&lt;PRE&gt;{&lt;BR /&gt;  &lt;SPAN&gt;"DbMaintenanceDailyRoutineSummary"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;{&lt;BR /&gt;    &lt;SPAN&gt;"success"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;[&lt;BR /&gt;      {&lt;BR /&gt;        &lt;SPAN&gt;"server-002"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;[&lt;BR /&gt;          {&lt;BR /&gt;            &lt;SPAN&gt;"vacuum"&lt;/SPAN&gt;&lt;SPAN&gt;: true,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"analyze"&lt;/SPAN&gt;&lt;SPAN&gt;: true,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"warehouse"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;&lt;SPAN&gt;"mydatabase@aaaaaa"&lt;BR /&gt;&lt;/SPAN&gt;          }&lt;SPAN&gt;,&lt;BR /&gt;&lt;/SPAN&gt;          {&lt;BR /&gt;            &lt;SPAN&gt;"vacuum"&lt;/SPAN&gt;&lt;SPAN&gt;: true,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"analyze"&lt;/SPAN&gt;&lt;SPAN&gt;: true,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"warehouse"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;&lt;SPAN&gt;"mydatabase@bbbbbb"&lt;BR /&gt;&lt;/SPAN&gt;          }&lt;BR /&gt;        ]&lt;BR /&gt;      }&lt;SPAN&gt;,&lt;BR /&gt;&lt;/SPAN&gt;      {&lt;BR /&gt;        &lt;SPAN&gt;"server-003"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;[&lt;BR /&gt;          {&lt;BR /&gt;            &lt;SPAN&gt;"vacuum"&lt;/SPAN&gt;&lt;SPAN&gt;: true,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"analyze"&lt;/SPAN&gt;&lt;SPAN&gt;: true,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"warehouse"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;&lt;SPAN&gt;"mydatabase@ccccccc"&lt;BR /&gt;&lt;/SPAN&gt;          }&lt;SPAN&gt;,&lt;BR /&gt;&lt;/SPAN&gt;          {&lt;BR /&gt;            &lt;SPAN&gt;"vacuum"&lt;/SPAN&gt;&lt;SPAN&gt;: true,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"analyze"&lt;/SPAN&gt;&lt;SPAN&gt;: true,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"warehouse"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;&lt;SPAN&gt;"mydatabase@ddddddd"&lt;BR /&gt;&lt;/SPAN&gt;          }&lt;BR /&gt;        ]&lt;BR /&gt;      }&lt;BR /&gt;    ]&lt;SPAN&gt;,&lt;BR /&gt;&lt;/SPAN&gt;    &lt;SPAN&gt;"fail"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;[&lt;BR /&gt;      {&lt;BR /&gt;        &lt;SPAN&gt;"server-002"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;[&lt;BR /&gt;          {&lt;BR /&gt;            &lt;SPAN&gt;"vacuum"&lt;/SPAN&gt;&lt;SPAN&gt;: true,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"analyze"&lt;/SPAN&gt;&lt;SPAN&gt;: false,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"warehouse"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;&lt;SPAN&gt;"mydatabase@eeeeee"&lt;BR /&gt;&lt;/SPAN&gt;          }&lt;BR /&gt;        ]&lt;BR /&gt;      }&lt;SPAN&gt;,&lt;BR /&gt;&lt;/SPAN&gt;      {&lt;BR /&gt;        &lt;SPAN&gt;"server-003"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;[&lt;BR /&gt;          {&lt;BR /&gt;            &lt;SPAN&gt;"vacuum"&lt;/SPAN&gt;&lt;SPAN&gt;: false,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"analyze"&lt;/SPAN&gt;&lt;SPAN&gt;: true,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"warehouse"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;&lt;SPAN&gt;"mydatabase@fffffff"&lt;BR /&gt;&lt;/SPAN&gt;          }&lt;SPAN&gt;,&lt;BR /&gt;&lt;/SPAN&gt;          {&lt;BR /&gt;            &lt;SPAN&gt;"vacuum"&lt;/SPAN&gt;&lt;SPAN&gt;: true,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"analyze"&lt;/SPAN&gt;&lt;SPAN&gt;: false,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"warehouse"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;&lt;SPAN&gt;"mydatabase@gggggg"&lt;BR /&gt;&lt;/SPAN&gt;          }&lt;SPAN&gt;,&lt;BR /&gt;&lt;/SPAN&gt;          {&lt;BR /&gt;            &lt;SPAN&gt;"vacuum"&lt;/SPAN&gt;&lt;SPAN&gt;: true,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"analyze"&lt;/SPAN&gt;&lt;SPAN&gt;: false,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"warehouse"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;&lt;SPAN&gt;"mydatabase@hhhhhh"&lt;BR /&gt;&lt;/SPAN&gt;          }&lt;BR /&gt;        ]&lt;BR /&gt;      }&lt;BR /&gt;    ]&lt;BR /&gt;  }&lt;BR /&gt;}&lt;/PRE&gt;&lt;P&gt;Can I convert that JSON in something like the following:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;DbMaintenanceDailyRoutineSummary&lt;/P&gt;&lt;P&gt;fail:&lt;/P&gt;&lt;P&gt;server002:&lt;/P&gt;&lt;P data-unlink="true"&gt;mydatabase@eeeeee:&amp;nbsp;&amp;nbsp;analyze: false, vacuum: true&lt;/P&gt;&lt;P&gt;server003:&lt;/P&gt;&lt;P&gt;mydatabase@fffffff - analyze: false, vacuum: true&lt;/P&gt;&lt;P&gt;mydatabase@ggggg - analyze: false, vacuum: true&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;success:&lt;/P&gt;&lt;P&gt;server002:&lt;/P&gt;&lt;P&gt;mydatabase@aaaaaa- analyze: true, vacuum: true&lt;/P&gt;&lt;P&gt;mydatabase@bbbbbb - analyze: true, vacuum: true&lt;/P&gt;&lt;P&gt;server003:&lt;/P&gt;&lt;P data-unlink="true"&gt;mydatabase@ccccccc&amp;nbsp; - analyze: false, vacuum: true&lt;/P&gt;&lt;P&gt;mydatabase@dddddd - analyze: false, vacuum: true&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Any help appreciated.&lt;/P&gt;</description>
    <pubDate>Sat, 27 Jun 2020 16:21:49 GMT</pubDate>
    <dc:creator>felipesodre</dc:creator>
    <dc:date>2020-06-27T16:21:49Z</dc:date>
    <item>
      <title>Solved In another topic - How to parse JSON to Text</title>
      <link>https://community.splunk.com/t5/Alerting/Solved-In-another-topic-How-to-parse-JSON-to-Text/m-p/506282#M9197</link>
      <description>&lt;P&gt;Hi everyone, I am trying to parse a json data to a plain text formatted to use it in an email alert.&lt;/P&gt;&lt;P&gt;Here is my JSON:&lt;/P&gt;&lt;PRE&gt;{&lt;BR /&gt;  &lt;SPAN&gt;"DbMaintenanceDailyRoutineSummary"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;{&lt;BR /&gt;    &lt;SPAN&gt;"success"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;[&lt;BR /&gt;      {&lt;BR /&gt;        &lt;SPAN&gt;"server-002"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;[&lt;BR /&gt;          {&lt;BR /&gt;            &lt;SPAN&gt;"vacuum"&lt;/SPAN&gt;&lt;SPAN&gt;: true,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"analyze"&lt;/SPAN&gt;&lt;SPAN&gt;: true,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"warehouse"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;&lt;SPAN&gt;"mydatabase@aaaaaa"&lt;BR /&gt;&lt;/SPAN&gt;          }&lt;SPAN&gt;,&lt;BR /&gt;&lt;/SPAN&gt;          {&lt;BR /&gt;            &lt;SPAN&gt;"vacuum"&lt;/SPAN&gt;&lt;SPAN&gt;: true,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"analyze"&lt;/SPAN&gt;&lt;SPAN&gt;: true,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"warehouse"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;&lt;SPAN&gt;"mydatabase@bbbbbb"&lt;BR /&gt;&lt;/SPAN&gt;          }&lt;BR /&gt;        ]&lt;BR /&gt;      }&lt;SPAN&gt;,&lt;BR /&gt;&lt;/SPAN&gt;      {&lt;BR /&gt;        &lt;SPAN&gt;"server-003"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;[&lt;BR /&gt;          {&lt;BR /&gt;            &lt;SPAN&gt;"vacuum"&lt;/SPAN&gt;&lt;SPAN&gt;: true,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"analyze"&lt;/SPAN&gt;&lt;SPAN&gt;: true,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"warehouse"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;&lt;SPAN&gt;"mydatabase@ccccccc"&lt;BR /&gt;&lt;/SPAN&gt;          }&lt;SPAN&gt;,&lt;BR /&gt;&lt;/SPAN&gt;          {&lt;BR /&gt;            &lt;SPAN&gt;"vacuum"&lt;/SPAN&gt;&lt;SPAN&gt;: true,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"analyze"&lt;/SPAN&gt;&lt;SPAN&gt;: true,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"warehouse"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;&lt;SPAN&gt;"mydatabase@ddddddd"&lt;BR /&gt;&lt;/SPAN&gt;          }&lt;BR /&gt;        ]&lt;BR /&gt;      }&lt;BR /&gt;    ]&lt;SPAN&gt;,&lt;BR /&gt;&lt;/SPAN&gt;    &lt;SPAN&gt;"fail"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;[&lt;BR /&gt;      {&lt;BR /&gt;        &lt;SPAN&gt;"server-002"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;[&lt;BR /&gt;          {&lt;BR /&gt;            &lt;SPAN&gt;"vacuum"&lt;/SPAN&gt;&lt;SPAN&gt;: true,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"analyze"&lt;/SPAN&gt;&lt;SPAN&gt;: false,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"warehouse"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;&lt;SPAN&gt;"mydatabase@eeeeee"&lt;BR /&gt;&lt;/SPAN&gt;          }&lt;BR /&gt;        ]&lt;BR /&gt;      }&lt;SPAN&gt;,&lt;BR /&gt;&lt;/SPAN&gt;      {&lt;BR /&gt;        &lt;SPAN&gt;"server-003"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;[&lt;BR /&gt;          {&lt;BR /&gt;            &lt;SPAN&gt;"vacuum"&lt;/SPAN&gt;&lt;SPAN&gt;: false,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"analyze"&lt;/SPAN&gt;&lt;SPAN&gt;: true,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"warehouse"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;&lt;SPAN&gt;"mydatabase@fffffff"&lt;BR /&gt;&lt;/SPAN&gt;          }&lt;SPAN&gt;,&lt;BR /&gt;&lt;/SPAN&gt;          {&lt;BR /&gt;            &lt;SPAN&gt;"vacuum"&lt;/SPAN&gt;&lt;SPAN&gt;: true,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"analyze"&lt;/SPAN&gt;&lt;SPAN&gt;: false,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"warehouse"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;&lt;SPAN&gt;"mydatabase@gggggg"&lt;BR /&gt;&lt;/SPAN&gt;          }&lt;SPAN&gt;,&lt;BR /&gt;&lt;/SPAN&gt;          {&lt;BR /&gt;            &lt;SPAN&gt;"vacuum"&lt;/SPAN&gt;&lt;SPAN&gt;: true,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"analyze"&lt;/SPAN&gt;&lt;SPAN&gt;: false,&lt;BR /&gt;&lt;/SPAN&gt;            &lt;SPAN&gt;"warehouse"&lt;/SPAN&gt;&lt;SPAN&gt;: &lt;/SPAN&gt;&lt;SPAN&gt;"mydatabase@hhhhhh"&lt;BR /&gt;&lt;/SPAN&gt;          }&lt;BR /&gt;        ]&lt;BR /&gt;      }&lt;BR /&gt;    ]&lt;BR /&gt;  }&lt;BR /&gt;}&lt;/PRE&gt;&lt;P&gt;Can I convert that JSON in something like the following:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;DbMaintenanceDailyRoutineSummary&lt;/P&gt;&lt;P&gt;fail:&lt;/P&gt;&lt;P&gt;server002:&lt;/P&gt;&lt;P data-unlink="true"&gt;mydatabase@eeeeee:&amp;nbsp;&amp;nbsp;analyze: false, vacuum: true&lt;/P&gt;&lt;P&gt;server003:&lt;/P&gt;&lt;P&gt;mydatabase@fffffff - analyze: false, vacuum: true&lt;/P&gt;&lt;P&gt;mydatabase@ggggg - analyze: false, vacuum: true&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;success:&lt;/P&gt;&lt;P&gt;server002:&lt;/P&gt;&lt;P&gt;mydatabase@aaaaaa- analyze: true, vacuum: true&lt;/P&gt;&lt;P&gt;mydatabase@bbbbbb - analyze: true, vacuum: true&lt;/P&gt;&lt;P&gt;server003:&lt;/P&gt;&lt;P data-unlink="true"&gt;mydatabase@ccccccc&amp;nbsp; - analyze: false, vacuum: true&lt;/P&gt;&lt;P&gt;mydatabase@dddddd - analyze: false, vacuum: true&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Any help appreciated.&lt;/P&gt;</description>
      <pubDate>Sat, 27 Jun 2020 16:21:49 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Alerting/Solved-In-another-topic-How-to-parse-JSON-to-Text/m-p/506282#M9197</guid>
      <dc:creator>felipesodre</dc:creator>
      <dc:date>2020-06-27T16:21:49Z</dc:date>
    </item>
  </channel>
</rss>

