I'm new to Splunk and I'm trying to do something that is probably basic but I haven't been able to figure out how to do it. I have a log in Splunk which contains an http_query along the lines of: ``` my_object[prop1]=someVal&my_object[prop2]=someOtherVal ``` I'm trying to use a timechart to inspect these values. I've tried: `timechart count by my_object[prop1]` which tells me prop1 is undefined. Then also tried `timechart count by my_object.prop1` which gives me a time series with NULL everywhere. How can I do this?
... View more