I would like to search for each value in an extracted field.
My intial query is as follow:
index=moneta-pro "IPN Post API execution started for the orderRefNo" AND "printOs" | rex field=_raw "(?ms)^(?:[^ \\n]* ){9}(?P<orderId>\\d+)" offset_field=_extracted_fields_boundsd_fields_bounds | table orderId | dedup orderId
which returns following:
Now I'd like to use each value in OrderId and use it in search and append to the above table. For example, check the status of the order. Individual query should look like.
index=* " Received response status code as 200 and the message body as" AND orderId=<<each dynamic value from above table>>
... View more