Hi, I need some help to transform the below event? Thanks for your time.
2016-08-30 13:13:48,525 log_level='INFO' abc_000001="temp" abc_000002="temp1" abc_000003="temp2" abc_000004="temp2" abc_000005="temp2" abc_000006="temp3" ....... abc_000255="123" abc_000256="xyz"
| table abc_*
doesn't display all the fields and the order is missing. There are almost 300 fields. How to table all the field values using wild card?
How to create a new field - NEW_FIELD with the unique values of abc_* in the same order.
Expected Output :
NEW_FIELD
temp
temp1
temp2 (abc_000003,abc_000004 has the same value. So need to remove duplicates)
temp3
123
xyz
Thanks.
... View more