my json file contains total 2 stages as below.
per_stage_info_vendor_data: [ [-]
{ [-]
Stage: stage1
WallClockTime: 0h:30m:23s
}
{ [-]
Stage: stage2
WallClockTime: 0h:52m:36s
}
]
with following regular expression we are able to get the hours mins and seconds.
rex field=per_stage_info_vendor_data{}.WallClockTime max_match=0 "((?<hours>\d+)h:(?<minutes>\d+)m:(?<seconds>\d+)s)"
But when i tried |eval stagetime=hours*3600+minutes*60+seconds it's not working, when i checked further any of the arithmetic operation on these three fields(hours,minutes and seconds).
do i need to convert these fields to any other format.
Looking at your data, it appears that the rex would give you multi-valued fields, which you can't then do arithmetic on. Please explain what it is you are trying to actually do.