Receiving an error while using the mvexpand command (does not exist in the data)

[super_saiyan]

Hi everyone,

currently, i am trying to expand one of the multiple field values but i am getting the result with the below error.
Field 'deployment' does not exist in the data.

index=json
|rex mode=sed "s/.*-\s//g"
|spath
|rename ops{}.steps{}.steps{}.address{}.deployment as deployment 
|mvexpand deployment
|mvexpand operation
|table deployment

[ITWhisperer]

Put the field name in double quotes (usually it is single quotes for field names but rename seems to operate differently)

|rename "ops{}.steps{}.steps{}.address{}.deployment" as deployment 

[super_saiyan]

anyone ?

[ITWhisperer]

If you don't have the deployment field, what fields do you have?

[super_saiyan]

Hi, I have shared the logs with you in DM

[kamlesh_vaghela]

@super_saiyan 

Can you please share some sample events?

Meanwhile, you can try this rename as well. 

| rename "ops.steps.steps.address.deployment" as deployment

KV

[super_saiyan]

Thanks much @kamlesh_vaghela 
I have shared the logs in DM, please check