02.08.2023 12:44:10.690 *INFO* [sling-threadpool-2cfa6523-0895-49ea-bb99-ae6f63c25cf6-32-Create Site from Template(aaa/jobs/abc)] bbb.CreateSiteFromSiteTemplateJobExecutor Private Site : ‘site4’ created by user : ‘admin’ with MRNumber :  ‘dr4’ I want to extract site , user and DR number and create table ... View more

Hi All I have a nested JSON in my log event. On that basis, I have to create a dynamic table. {status: FINISHED    data: [       {         duration: 123        status: A      }      {         duration: 456        status: B      }      {         duration: 678        status:C      }    ]} I need to create the table for this nested one Table Structure :  status A B C Finished 123 456  678 Also, I have one more req. If in the future we get more values in the sub-part of JSON then can we add a column for that also ... View more

I have a log of the form "Associated integration for customer AAA is Integration{id=1865, clientID}, carrying out deactivate call while processing message success" I wanted to extract the AAA which is the customer name from this log  ... View more

i have a query that show the data in table form i have to merge the row Query : my search query | | timechart span=5m count by message | eval time=strftime(_time,"%Y-%m-%d %H:%M:%S") |untable time message count | xyseries message time count It gives the date in a table form message time1 time2 time3 a/b/c 1 2 3 abc/1/x 0 1 4 abc/2/x 0 1 2 abc/3/x 0 2 4 i have to merge the row and change the metric to message time1 time2 time3 a/b/c 1 2 3 abc/x 0 4 10 i have tried rex expression also but i didn't work ... View more