Hello,
This question has probably been asked and answered, but I just can't seem to find a best solution.
So, in the results I want to table the Allow and Deny values. And the second result would be the | search Action=eks* only where the Effect is Allow. I have tried till now, but I cannot relate the Allow action, it lists all values. Thanks in Advance.
| spath "Action{}" output="Action"
| spath "Effect"
| mvexpand Action
Finally, this worked for me. Thanks for advice.
| mvexpand Json
| spath "Action{}" input=Json output="Action"
| spath "Effect" input=Json output="Effect"
| mvexpand Action
| table Action Effect
Action Name | Effect |
eks | allow |
ecs | allow |
config | deny |
budgets | deny |
| spath "Action{}" output="Action"
| spath "Effect"
| mvexpand Action
Please can you give an example of your expected results?