Hi Team/Kamlesh, @kamlesh_vaghela Below is my json object and i want find the count of exception_type whose value is "Application Exception" in last 1 hour which is child element of error object and i should display the count in table. I am very new to splunk, plz help me by giving the splunk query. Please help me THANK YOU SO MUCH in advance. { "class_name": "com.verizon.vsib.addressval.services.CameoClient", "VSAD_ID": "GYEV", "True_ip": "10.118.142.156", "log_message": "Missing Company Code", "server_port": "443", "error": { "exception_type": "Application Exception", "exception_code": "P0106", "exception_details": "Missing Company Code" }, "user_agent": "PostmanRuntime/7.25.0", "@timestamp": "2020-12-24T05:41:18.181Z", "log_time_stamp": 1608788478110, "status_code": 500, "api_url": "https://vsib-dev.ebiz.verizon.com/addressValidation/validateAddress?null", "log_level": "info", "server_host": "10.118.143.141", "app_environment": "dev", "@version": "1", "requestId": "TestSplunk-17", "vast_id": 25439, "log_date": "", "logger_class": "com.verizon.vsib.addressval.services.CameoClient", "time": 1608788478.181, "app_name": "VSIB", "function_name": "pushApplicationError" } Regards, Murali P.
... View more