Getting Data In
Highlighted

How to parse data for a table to display list

New Member

This is what I have when I tried my search query.

INFO: Found installations for 8 accounts [scheduler]
       "accountNames": [
         "MTS",
         "hasc-services",
         "ahchaudhary",
         "reviews",
         "PM-Solutions",
         "traveler",
         "Affiliates",
         "Catalyst"
       ],
       "accountCount": 8

I am trying to parse the data to a table to display a list of accountNames only.

Any help would be appreciated.

0 Karma
Highlighted

Re: How to parse data for a table to display list

Communicator

I would recommend creating a field to extract the data using a regex:

Something like:

| rex field=raw maxmatch=0 "\"(?.*)\""

0 Karma
Highlighted

Re: How to parse data for a table to display list

Moderator
Moderator

Hi @skphi13 ,

Did you have a chance to check out an answer? If it worked, please resolve this post by approving it! If your problem is still not solved, keep us updated so that someone else can help you.

Thanks for posting!

0 Karma
Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.