Extract fields with specific value where multiple combination of "value" exists for same "Key"

[Deprasad]

I've the below event, where I need to display only event which has action=test and category=testdata.

test
{
line1: 1
"action": "test",

"category": "testdata",

}

test1

{
line1: 1
"action": "event",

"category": "testdata",

}
test2

{
line1: 1
"action": "test",

"category": "duplicate_data",

}

[PickleRick]

If this is a verbatim copy of your original event you have much more problems with your data.

[ITWhisperer]

What have you tried so far?

[Deprasad]

I've an event looks like below. The Key value pair of "test:22345" exists more than 1 time and I need only this events in the output as table or count of events.

{"test":"22345","testType":"model"},{"test":"22345","testType":"model1"},{"test":"22345","testType":"model2"}