I have field CI extracted from json payload { "Name": "zSeries", "Severity":5, "Category":"EVENT", "SubCategory":"Service issues - Unspecified", "TStatus": "OPEN", "CI": "V2;Y;Windows;srv048;...
See more...
I have field CI extracted from json payload { "Name": "zSeries", "Severity":5, "Category":"EVENT", "SubCategory":"Service issues - Unspecified", "TStatus": "OPEN", "CI": "V2;Y;Windows;srv048;LogicalDisk;C:", "Component": "iphone" } Further, i want the CI field value extracted using DELIMS = ";". I have created below props & transforms configuration but not working. [source::cluster_test] REPORT-fields = ci-extraction [ci-extraction] SOURCE_KEY = CI DELIMS = ";" FIELDS = CI_V2,CI_1,CI_2,CI_3,CI_4,CI_5 Any help highly appreciated.