Splunk Search

How to extract data of JSON in one row?

New Member

I have this JSON, and I want extrac the value when the name is "ca-channel" and value when name is "Ca-Request-Id" but this data in one row, for example:

channel   |        requestId
    w          |       000001707ce0ca4c-58e1e56

alt text

0 Karma

Path Finder

At first you just extract the fields from the json format of logs. Then try to filter the portions .
Please follow link to extract the fields :

0 Karma

Ultra Champion
0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!