Access JSON data

[biec1]

This is in follow-up to https://answers.splunk.com/answers/578105/help-with-search-to-access-json-data.html#comment-577285

Please find the attached image for sample event.

The query provided by is returning :- ABC.machine_cat:_attributes.ID.ABC.machine_cat

<<FIELD>>
_attributes.ID.ABC.machine_cat

<<MATCHSTR>>
ABC.machine_cat

I want ABC.machine_cat : <<VALURE of the machine_cat>>
Example: ABC.machine_cat : 01

[jimmip]

This tools with be help full to work with JSON data

1. JSON Formatter and Validator : https://jsonformatter.org
2. JSON Viewer https://codebeautify.org/jsonviewer