Hi, I am looking to parse the nested JSON events. basically need to break them into multiple events. I an trying some thing like this but its just duplicating same record in multiple lines. ...
See more...
Hi, I am looking to parse the nested JSON events. basically need to break them into multiple events. I an trying some thing like this but its just duplicating same record in multiple lines. | spath path=list.entry{}.fields output=items
| mvexpand items I am looking to get all key/vale pair as single event under "fields" Sample Records {
"total": 64,
"list": {
"entry": [
{
"recordId": 7,
"created": 1682416024092,
"id": "e70dbd86-53cf-4782-aa84-cf28cde16c86",
"fields": {
"NumDevRes001": 11111,
"NumBARes001": 3,
"lastUpdated": 1695960000000,
"engStartDate": 1538452800000,
"RelSupport001": 0,
"UnitTest001": 0,
"Engaged": 1,
"ProdGroup001": 1,
"QEResSGP001": 0.5,
"QEResTOR001": 1,
"QEResLoc001": 3,
"SITBugs001": 31,
"QEResIND001": 5,
"QEResLoc003": 3,
"QEResLoc002": 3,
"Project": "Registration Employee Directory Services",
"AutoTestCount001": 1657,
"AppKey001": "ABC",
},
"ownedBy": "TEST1"
},
{
"recordId": 8,
"createdBy": "TEST2",
"created": 1682416747947,
"id": "91e88ae6-0b64-48fc-b8ed-4fcfa399aa3e",
"fields": {
"NumDevRes001": 22222,
"NumBARes001": 3,
"lastUpdated": 1695960000000,
"engStartDate": 1538452800000,
"RelSupport001": 0,
"UnitTest001": 0,
"Engaged": 1,
"ProdGroup001": 1,
"QEResSGP001": 0.5,
"QEResTOR001": 1,
"QEResLoc001": 3,
"SITBugs001": 31,
"QEResIND001": 5,
"QEResLoc003": 3,
"QEResLoc002": 3,
"Project": "Registration Employee Directory Services",
"AutoTestCount001": 1657,
"AppKey001": "ABC",
},
"ownedBy": "TEST2"
}
]
}
}