Splunk Search

How to to many to single mapping in multi value fields

sivaranjiniG
Path Finder

i have a event like this

stage_result:
[{
stage_name:deploy,
edge:[
{
type:Parallel
},
{
type:Parallel
}]
},
{
stage_name:deploy2,
edge:[{
type:stage}]
}

From the above event i want my output like this in a table format,

Stage Type
deploy Parallel,Parallel
deploy1 stage

Note: The above json structure is one single event thats why i am not able to get the my data extracted. Stage is a multivalue field which is having field inside which is Type thats again multi-value field

Please help me to resolve this:)

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...