All Apps and Add-ons

SPL or sourcetype to parse json data without standard key value data?

joxers25
Explorer

Hi Folks,

Looking for someone to suggest how to extract the data from the below json api return in the following format?

queries are sent in the api call, structured data is returned but without the key.

servername:"id.server",
type:"TXT",
error"NOERROR",

{
    "result": {
        "rows": 2001,
        "data": [
            {
                "dimensions": [
                    "id.server",
                    "TXT",
                    "NOERROR",
            }
    ]
    }
}

Thanks!

Labels (1)
0 Karma
Get Updates on the Splunk Community!

The Payment Operations Wake-Up Call: Why Financial Institutions Can't Afford ...

The same scenario plays out across financial institutions daily. A payment system fails at 11:30 AM on a busy ...

Make Your Case: A Ready-to-Send Letter for Getting Approval to Attend .conf25

Hello Splunkers, Want to attend .conf25 in Boston this year but not sure how to convince your manager? We've ...

Community Spotlight: A Splunk Expert's Journey

In the world of data analytics, some journeys leave a lasting impact not only on the individual but on the ...