topic Re: Transpose lines to Column in Splunk Search

Transpose lines to Column

felipesodre — Thu, 25 Jun 2020 20:53:55 GMT

{
  "DbMaintenanceDailyRoutineSummary": {
    "success": [
      {
        "server-002": [
          {
            "vacuum": true,
            "analyze": true,
            "warehouse": "mydatabase@aaaaaa"
          },
          {
            "vacuum": true,
            "analyze": true,
            "warehouse": "mydatabase@bbbbbb"
          }
        ]
      },
      {
        "server-003": [
          {
            "vacuum": true,
            "analyze": true,
            "warehouse": "mydatabase@ccccccc"
          },
          {
            "vacuum": true,
            "analyze": true,
            "warehouse": "mydatabase@ddddddd"
          }
        ]
      }
    ],
    "fail": [
      {
        "server-002": [
          {
            "vacuum": true,
            "analyze": false,
            "warehouse": "mydatabase@eeeeee"
          }
        ]
      },
      {
        "server-003": [
          {
            "vacuum": false,
            "analyze": true,
            "warehouse": "mydatabase@fffffff"
          },
          {
            "vacuum": true,
            "analyze": false,
            "warehouse": "mydatabase@gggggg"
          },
          {
            "vacuum": true,
            "analyze": false,
            "warehouse": "mydatabase@hhhhhh"
          }
        ]
      }
    ]
  }
}

I am wondering how can I convert this result in something like the following message to sent it as a alert by email.

DbMaintenanceDailyRoutineSummary

fail:

server002:

mydatabase@eeeeee: analyze: false, vacuum: true

server003:

mydatabase@fffffff - analyze: false, vacuum: true

mydatabase@ggggg - analyze: false, vacuum: true

success:

server002:

mydatabase@aaaaaa- analyze: true, vacuum: true

mydatabase@bbbbbb - analyze: true, vacuum: true

server003:

mydatabase@ccccccc - analyze: false, vacuum: true

mydatabase@dddddd - analyze: false, vacuum: true

Re: Transpose lines to Column

to4kawa — Mon, 29 Jun 2020 10:56:03 GMT

Re: Transpose lines to Column

felipesodre — Fri, 26 Jun 2020 03:51:27 GMT

Thanks for your help, appreciate it. But the solution presented is not I would like to have.

I just want to change that part from this:

"vacuum": true,
"analyze": false,
"warehouse": "mydatabase@hhhhhh"

to this:

"warehouse": "mydatabase@hhhhhh", "vacuum": true, "analyze": false

Re: Transpose lines to Column

to4kawa — Mon, 29 Jun 2020 10:55:47 GMT

Re: Transpose lines to Column

felipesodre — Sat, 27 Jun 2020 16:20:19 GMT

Thanks.

This is all I need. Issue fixed.

Appreciate it!

Re: Transpose lines to Column

to4kawa — Mon, 29 Jun 2020 10:56:25 GMT

Re: Transpose lines to Column

felipesodre — Mon, 29 Jun 2020 10:37:47 GMT

Yes it is. Thank you.

Re: Transpose lines to Column

to4kawa — Mon, 29 Jun 2020 10:55:17 GMT

OK. My answer is not your solution.