I have a Json file which contains a "date" field. The date field in my data that can either be of format %Y-%m-%d %H:%M:%S (e.g. 2025-05-23 9:35:35 PM) or %Y-%m-%d (e.g. 2025-05-23). The only way to ingest this Json is via manual ingestion. When trying to set the _time field on ingest, setting the timestamp format to %Y-%m-%d %H:%M:%S will fail and default to the wrong _time value for date fields with format %Y-%m-%d. However, setting timestamp to format %Y-%m-%d won't capture the HMS part. Was there a way to coalesce these so that it will check if HMS is present, and if so, then apply %Y-%m-%d %H:%M:%S format? Or is there a workaround so at least the data ingestion for _time is accurate? ... View more

Here I have 2 event statistics (id=superman & id=batman) in Json format. How do I arrange it in a table format based on the id and enemy information values? This is slightly different to previous questions as for the "enemies"-key values, the "enemy_information" has the value headers while "enemy_information_values" contains a list of values matching the  "enemy_information" value headers.  For example, I want the result to look something like the table below. I know the data needs pre-processing, but I wanted to know if it was possible to do so via SPL commands. The reasoning to avoid pre-processing is I already have previous data with the same format that are too far back for me to re-ingest.  [{     "id": "Superman",     "birthName": "Kal-El",     "origin": "Krypton",     "enemies": [         {             "enemy_information": [                 "name",                 "location",                 "powers"             ],             "enemy_information_values": [                 [                     "Doomsday",                     "Kryptonian Prison",                     [                         "Super Strength",                         "Invulnerability",                         "Regeneration",                         "Adaptation",                         "Enhanced Durability",                         "Immunity to Kryptonite"                     ]                 ],                 [                     "Lex Luthor",                     "Metropolis",                     [                         "Genius-level Intellect",                         "Skilled Strategist",                         "Advanced Technology and Weaponry",                         "Political Influence",                         "Expert in Kryptonite"                     ]                 ]                             ]         }     ] }, {     "id": "Batman",     "birthName": "Bruce Wayne",     "origin": "Gotham City",     "enemies": [         {             "enemy_information": [                 "name",                 "location",                 "powers"             ],             "enemy_information_values": [                 [                     "Joker",                     "Gotham City",                     [                         "Genius-level Intellect",                         "Master of Psychological Manipulation",                         "Skilled Hand-to-Hand Combatant",                         "Expert in Criminal Psychology",                         "Master of Disguise"                     ]                 ],                 [                     "Two-Face",                     "Gotham City",                     [                         "Expert Marksman",                         "Skilled Hand-to-Hand Combatant",                         "Access to Advanced Weaponry",                         "Strategic Mind",                         "Psychological Trauma"                     ]                 ]             ]         }     ] }]     ... View more

My data has a tables{}.values{} containing a list of lists. Within each list there is data. Sample data below. When I try to extract this search to csv via job id, it's not containing tables{}.values{} data within a single cell and instead treating it as it's own field as it's comma delimited. How can I keep all the data within a singular field when exporting to CSV?   Sample data: test@email.com The following was found, on website: google.com, by test user, with id:testuser, extracted from test.txt, on date testdate,another test field.  ... View more

As the title suggests I have a dashboard with various panels and wondering if it's possible to export a single panel and all its contents (including token values) XML to JavaScript.   ... View more