Hi Everyone,
I have one requirement.
I have two types of logs
1st log which contains the field as Identifier 7bb86db9-8268-19a1-0000-0000648141a2
2020-10-12 12:44:51,553 ERROR [Timer-Driven Process Thread-2] o.a.StandardProcessGroup Failed to synchronize StandardProcessGroup[identifier=7bb86db9-8268-19a1-0000-0000648141a2] with Flow Registry because could not 24579813-d2a3-4d67-892f-11b5838011af in bucket 9d407076-db0a-4587-b8e7-51be45d8c193
host = lpdosputb50088.phx.aexp.com identifier = 7bb86db9-8268-19a1-0000-0000648141a2 source = /var/log/nifi/nifi-app.log
2nd logs contains the field as ID id = 21aa3004-1d9d-1679-9d43-b623891ef191
ADS_Id = initRequest_Type = atRequest_URL = org.apache..AbstractProcessor.onTrigger(AbstractProcessor.java:27) id = 21aa3004-1d9d-1679-9d43-b623891ef191
Both id and Identifier are extracted. I have concate Identifier and id made a new field id2.
Below is my search query for that.
index=abc sourcetype=xyz error
| rex field=_raw "ERROR(?<Error_Message>.*)"
| rex field=Error_Message "Failed(?<Message>.*)"
| eval Message="Failed".Message
|strcat id identifier id2|eval ClickHere= "https://abc.fgh.com/hjk/?processGroupId=".identifier
| table _raw identifier id2 ClickHere
| join type=outer id2[dbxquery query="SELECT id id2, parent_chain, url FROM parent_chains;" connection="SQL"]</query>
<earliest>-7d@h</earliest>
<latest>now</latest>
<sampleRatio>1</sampleRatio>
</search>
<fields>"_raw", "identifier","parent_chain","url"</fields>
<option name="count">100</option>
<option name="dataOverlayMode">none</option>
<option name="drilldown">cell</option>
<option name="percentagesRow">false</option>
<option name="refresh.display">progressbar</option>
<option name="rowNumbers">false</option>
<option name="totalsRow">false</option>
<option name="wrap">true</option>
<drilldown>
<condition field="identifier">
<link target="_blank">$row.ClickHere|n$</link>
</condition>
</drilldown>
I have created one hyperlink ClickHere and set the drill-down condition with Identifier.
Clicking on Identifier Its taking me to correct hyperlink.
But I don't want to display Identifier column I want to display id2 column and clicking on id2 column it should take me to the hyperlink where its taking to me with Identifier.
But for id2 its not working. Can someone guide me where I have gone wrong.
Thanks in advance.
