The event has a field: {
...
some_field: {
key1: value1
key2: value2
}
...
} How to iterate over the values of "some_field" field? For example I need to get max value. I need something like this: ... | eval filed_max_value=max(map_values(some_field)) For map_value I get error: Error in 'EvalCommand': The 'map_values' function is unsupported or undefined. Could you also explain how to use map_keys and map_values functions ?
... View more