Hi Team, The below is my json object, i want to read error object's sub field exception_type and should display the count in the last 1 hour in table format if exception_type="Application Exception" Please suggest me the splunk query i am very new to splunk. Thank you so much in advance. { "class_name": "com.verizon.vsib.addressval.services.CameoClient", "VSAD_ID": "GYEV", "True_ip": "10.118.142.156", "log_message": "Missing Company Code", "server_port": "443", "error": { "exception_type": "Application Exception", "exception_code": "P0106", "exception_details": "Missing Company Code" }, "user_agent": "PostmanRuntime/7.25.0", "@timestamp": "2020-12-24T05:41:18.181Z", "log_time_stamp": 1608788478110, "status_code": 500, "api_url": "https://vsib-dev.ebiz.verizon.com/addressValidation/validateAddress?null", "log_level": "info", "server_host": "10.118.143.141", "app_environment": "dev", "@version": "1", "requestId": "TestSplunk-17", "vast_id": 25439, "log_date": "", "logger_class": "com.verizon.vsib.addressval.services.CameoClient", "time": 1608788478.181, "app_name": "VSIB", "function_name": "pushApplicationError" }
... View more
