
[英]Splunk query to retrieve value from json log event and get it in a table
[英]Retrieve only the key object from the json output
I have the following JSON output and I want to select the key elements from this JSON, which are addNewOrder,login,navigateReport,navigateOrder,openNewOrder,openUrl in table
Details: {
addNewOrder: {
dur: 7706ms
end: Wed Sep 18 2019 14:38:48 GMT+0530 (India Standard Time)
navigationAPIData: {
connectEnd: 1568797694032
connectStart: 1568797694032
}
start: Wed Sep 18 2019 14:38:40 GMT+0530 (India Standard Time)
}
login: {
dur: 7046ms
end: Wed Sep 18 2019 14:38:17 GMT+0530 (India Standard Time)
navigationAPIData: {
connectEnd: 1568797694032
connectStart: 1568797694032
domComplete: 1568797694775
}
}
navigateReport: {
dur: 2804ms
end: Wed Sep 18 2019 14:38:28 GMT+0530 (India Standard Time)
}
navigateOrder: {
dur: 1804ms
end: Wed Sep 18 2019 14:38:23 GMT+0530 (India Standard Time)
}
openNewOrder: {
dur: 1700ms
end: Wed Sep 18 2019 14:38:33 GMT+0530 (India Standard Time)
}
openUrl: {
dur: 3011ms
end: Wed Sep 18 2019 14:38:00 GMT+0530 (India Standard Time)
}
}
嘗試使用正則表達式但無法正常工作。
聲明:本站的技術帖子網頁,遵循CC BY-SA 4.0協議,如果您需要轉載,請注明本站網址或者原文地址。任何問題請咨詢:yoyou2525@163.com.