I have a field named Msg which contains json. That json contains some values and an array. I need to get each item from the array and put it on its own line (line chart line) and also get one of the header values as a line. So on my line chart I want a line for each of: totalSorsTime, internalProcessingTime, remote_a, remote_b, etc The closest I can get is this- index=wdpr_S0001469 source="*-vas-latest*" "Orchestration Summary"
| spath input=Msg <<<< Msg field contains the json
| table _time, totalTime, totalSorsTime, internalProcessingTime, sorMetrics{}.sor, sorMetrics{}.executionTimeMs Any nudge in the right direction would be greatly appreciated! {
"totalTime": 2820,
"totalSorsTime": 1505,
"internalProcessingTime": 1315,
"sorMetrics": [
{
"sor": "remote_a",
"executionTimeMs": 77
},
{
"sor": "remote_b",
"executionTimeMs": 27
},
{
"sor": "remote_c",
"executionTimeMs": 759
},
{
"sor": "remote_d",
"executionTimeMs": 199
},
{
"sor": "remote_e",
"executionTimeMs": 85
},
{
"sor": "remote_f",
"executionTimeMs": 252
}
]
}
... View more
