Hello,
We are trying to split a nested json message into seperated events.
As we not wish to use the spath function it would be nice to split the events;
Our biggest challange right now is that we want to add the kId field in every event.
Example of the json;
{
"kId": 47,
"mId": 96,
"resultStatus": "OK",
"results": [{
"creationDate": 1560509581000,
"name": "test",
"resultStatus": "OK",
"duration": 0.858
}, {
"creationDate": 1560509581000,
"name": "test2",
"resultStatus": "OK",
"duration": 0.858
}]
}
we managed to get seperated events by using the following configurations:
props.conf
[measurements]
TRANSFORMS-kId = extract_kId
LINE_BREAKER = (},){|([){|(])}
SHOULD_LINEMERGE = false
transforms.conf
[extract_kId]
REGEX = kId[\"]:[,]
FORMAT = kId::$1
WRITE_META = true
events now look like this;
{"creationDate":1560509581000,"name":"test","resultStatus":"OK","duration":0.858}
{"creationDate":1560509581000,"name":"test2","resultStatus":"OK","duration":0.858}
How can we add the kId into this events?
Thanks in advance!
... View more
