Hi
I am trying to extract the values of certain field present in Log for a particular operation:
My Query:
Service="X1" Operation="Y1" AND AuditType="REQUEST_OUTBOUND" | sort _time | xmlunescape | xmlkv | fields + A, B
There are multiple values present in the log for fields A & B as below:
Message in Log:
<A>1000</A>
<A>29</A>
<A>30</A>
<B>B1</B>
<B>D2</B>
<B>C3</B>
whereas I need my output as :
A B
1000 B1
29 D2
30 C3
But i am getting output result as :
A B
30 C3
I am getting only the last value of the name-value pair but not all the values.
Could anyone please help in getting the desired output? Please let me know what command should i use and how to modify the search?
... View more