- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How do I operate on (and search from) sub-properties matching a pattern.
npxcomplete
New Member
10-02-2019
09:23 PM
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

woodcock
Esteemed Legend
10-14-2019
05:13 PM
Show us 5 sample events and a mockup of your desired output.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
aohls
Contributor
10-10-2019
08:26 AM
I am not sure what you are looking for but assuming you are looking for the value 5. You could do a regex on that field first maybe.
| rex field=_raw "count: (?<timerCount>\d+)"
With that you can then check: timerCount > 5
