I am trying the following query. However, activityId is not being passed to the second query and I am not having any results. index=kubernetes lineOfBusiness=ifm component=chub useCase=C5 responsePayload | rex field=_raw "imsiActivationDate\"\:\"(?<imsiActivationDate>[^\"]*)" | rex field=_raw "simChangeDate\"\:\"(?<simChangeDate>[^\"]*)" | rex field=_raw "activity-id=(?<activityId>[^||]*)" | table activityId | map search="index=kubernetes lineOfBusiness=ifm component=ifm activity-id=*$activityId$*" | rex field=_raw "msisdn":"=(?<msisdn>[^=]*)" | dedup activityId, msisdn | table activityId msisdn ... View more

"https://api.internal.t-mobile.com/customer-credit/v3/pre-screen-credit-offer/personal": Read timed out; nested exception is java.net.SocketTimeoutException: Read timed out] I want to extract the following  customer-credit/v3/pre-screen-credit-offer/personal it always starts with the pattern ".com/" and ends with ": ... View more

<fieldset submitButton="true"> <input type="multiselect" token="multiselect_token" searchWhenChanged="false"> <label>Proxy</label> <fieldForLabel>Proxy</fieldForLabel> <fieldForValue>headers.apiproxy</fieldForValue> <search> <query>index=apigee sourcetype=apigee_metrics | dedup headers.apiproxy | table headers.apiproxy</query> <earliest>-30d@d</earliest> <latest>now</latest> </search> <valuePrefix>headers.apiproxy="</valuePrefix> <valueSuffix>"</valueSuffix> <delimiter> OR </delimiter> </input> <input type="time" token="field2" searchWhenChanged="false"> <label>Time</label> <default> <earliest>-5m</earliest> <latest>now</latest> </default> </input> <input type="dropdown" token="field3" searchWhenChanged="false"> <label>Operation Path</label> <fieldForLabel>OperationPath</fieldForLabel> <fieldForValue>OperationPath</fieldForValue> <search> <query>index=apigee sourcetype=apigee_metrics $multiselect_token$ | stats count by apiStats.operation_path | dedup apiStats.operation_path | table apiStats.operation_path</query> <earliest>$field2.earliest$</earliest> <latest>$field2.latest$</latest> </search> </input> </fieldset> ... View more