
[英]Splunk query to retrieve value from json log event and get it in a table
[英]Retrieve only the key object from the json output
I have the following JSON output and I want to select the key elements from this JSON, which are addNewOrder,login,navigateReport,navigateOrder,openNewOrder,openUrl in table
Details: {
addNewOrder: {
dur: 7706ms
end: Wed Sep 18 2019 14:38:48 GMT+0530 (India Standard Time)
navigationAPIData: {
connectEnd: 1568797694032
connectStart: 1568797694032
}
start: Wed Sep 18 2019 14:38:40 GMT+0530 (India Standard Time)
}
login: {
dur: 7046ms
end: Wed Sep 18 2019 14:38:17 GMT+0530 (India Standard Time)
navigationAPIData: {
connectEnd: 1568797694032
connectStart: 1568797694032
domComplete: 1568797694775
}
}
navigateReport: {
dur: 2804ms
end: Wed Sep 18 2019 14:38:28 GMT+0530 (India Standard Time)
}
navigateOrder: {
dur: 1804ms
end: Wed Sep 18 2019 14:38:23 GMT+0530 (India Standard Time)
}
openNewOrder: {
dur: 1700ms
end: Wed Sep 18 2019 14:38:33 GMT+0530 (India Standard Time)
}
openUrl: {
dur: 3011ms
end: Wed Sep 18 2019 14:38:00 GMT+0530 (India Standard Time)
}
}
尝试使用正则表达式但无法正常工作。
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.