I have a field message that when I run the search
index=example123 host=5566
|search "*specials word*"
I table message
it displays as an example below: 2024-08-02 16:45:21- INFO Example ([...
See more...
I have a field message that when I run the search
index=example123 host=5566
|search "*specials word*"
I table message
it displays as an example below: 2024-08-02 16:45:21- INFO Example (['test1' , 'test2', 'test3', 'test4', 'test5', 'test6', 'test7)'] , ['Medium', 'Large ', 'Small', 'Small ', 'Large ', 'Large ', 'Large ']) Is there a way to run a command so that the data in the field "Message" can be extracted into their own fields or displayed like this matching 1:1 on a table test1 test2 test3 test4 test5 test6 test7 Medium Large Small Small Large Large Large or test1 = Medium test2= Large test3 = Small .... ect