Hello,
Can someone help me in extracting the fields from this nested json raw logs?
{"eventVersion":"1.09","userIdentity":{"type":"AssumedRole","principalId":"AROAUDGMTGGHXY5YL2EW6:redlock","arn":"arn:aws:sts::281749434767:assumed-role/PrismaCloudRole-804603675133320192-member/redlock","accountId":"281749434767","accessKeyId":"ASIAUDGMTGGHRRR2WZT2","sessionContext":{"sessionIssuer":{"type":"Role","principalId":"AROAUDGMTGGHXY5YL2EW6","arn":"arn:aws:iam::281749434767:role/PrismaCloudRole-804603675133320192-member","accountId":"281749434767","userName":"PrismaCloudRole-804603675133320192-member"},"attributes":{"creationDate":"2024-04-09T05:58:35Z","mfaAuthenticated":"false"}}},"eventTime":"2024-04-09T12:43:01Z","eventSource":"athena.amazonaws.com","eventName":"ListWorkGroups","awsRegion":"us-west-2","sourceIPAddress":"52.52.50.152","userAgent":"Vert.x-WebClient/4.4.6","requestParameters":{"maxResults":50},"responseElements":null,"requestID":"59f0ad81-7607-40bb-a40b-eab3fad0fb7a","eventID":"4bc352ff-0cc5-49cb-9b0e-2784bffbb58f","readOnly":true,"eventType":"AwsApiCall","managementEvent":true,"recipientAccountId":"281749434767","eventCategory":"Management","tlsDetails":{"tlsVersion":"TLSv1.3","cipherSuite":"TLS_AES_128_GCM_SHA256","clientProvidedHostHeader":"athena.us-west-2.amazonaws.com"}}
logSource: aws-controltower/CloudTrailLogs:o-bj312h8hh6_281749434767_CloudTrail_us-east-1
logSourceType: aws:cloudwatchlogs
... View more