Hello Guys ,
I have one json event in which there is subarray so i want to create one field which will have first index value of array for example
{
"data":
{"task":"pullFrom",
"from_repo...
See more...
Hello Guys ,
I have one json event in which there is subarray so i want to create one field which will have first index value of array for example
{
"data":
{"task":"pullFrom",
"from_repo":"https://abc.mxz.com:8089",
"to_repo":"https://abc.mxzz.com:8089",
"to_repo_change_count":20008,
"asset_uri":["kannu","search","ui-prefs","search"]
}
}
in above event i wnat to create the field which will have value only "kannu" from subarray "asset_uri" .
I tried doing data.asset_uri[0] as a normal json parsing but splunk is giving error while doing like this
Thanks in advance