Hi all:
I'm a rookie user ask for help, I want to extract all vault in one _raw data(CLI command log as below photo),
I want have Location,Card,Type,Mnemonic,Part Number,Serial Number,CLEI,Pmax(W),Imax(A) these fields all vault, can some one help me please, thank you very much.
Rather than a picture, please provide your sample data as raw text in a code block (anonymised/obfuscated as necessary) to aid volunteers designing a solution for you.
Also, I assume from your description, this is all ingested as a single event. Does the event have a timestamp or does it take the ingestion time? Having extracted the fields, how do you want them displayed / reported on, e.g. all still in a single event or separate events for each location (and _time)?