Hi, I have logger statements like below: Event data - {"firstName":"John","lastName":"Doe"} My query needs <rex-statement> where double quotes (") in the logs are parsed and the two fields are extracted in a table: index=my-index "Event data -" | rex <rex-statement> | fields firstName, lastName | table firstName, lastName Please let me know what <rex-statement> do I have to put. Thanks in advance.
... View more