Hello All, We have data coming in as part of HEC ingestion in Splunk. And I would need help to extract fields either be it search time or index time.
we need line breaking and field extractions
Below is the sample :
INFO 2021-10-27 07:31:00,004 [[MuleRuntime].io.4090: [bcom_membermasterbatch1].schedulerjobstatusFlow.BLOCKING @7a0bb47e] d4fff913-36f7-11ec-ba0c-11010ad55507org.mule.extension.jsonlogger.JsonLogger: {
"correlationId" : "e4ggf523-27h7-11ec-ba0c-33333ad55333",
"message" : "no key retrived",
"tracePoint" : "START",
"priority" : "INFO",
"elapsed" : 0,
"locationInfo" : {
"lineInFile" : "222",
"component" : "json-logger:logger",
"fileName" : "schedulerjobstatus.xml",
"rootContainer" : "schedulerjobstatusFlow"
