I have a log like this
{"module": “x”, "app_name": “sample”-app, "message": "Number of Transactions :52”}. I need to extract the value 52 as count.
I can use eval c1=substr(message,25,2) . But how can I use as count variable. I want to use this count to compare with another count
What's wrong with what you have? You have the count in a field called 'c1' so you should be able to compare with another count using eval.
| eval match = if(c1 == count, "Yes", "No")
