This is in follow-up to https://answers.splunk.com/answers/578105/help-with-search-to-access-json-data.html#comment-577285
Please find the attached image for sample event.
The query provided by is returning :- ABC.machine_cat:_attributes.ID.ABC.machine_cat
I want ABC.machine_cat : <<VALURE of the machine_cat>>
Example: ABC.machine_cat : 01
<<VALURE of the machine_cat>>
This tools with be help full to work with JSON data