Hello,
I'm trying to get a clearer picture of data from our Okta application however two pieces of information have the exact same field. Is there a way to change this?
So the example here is we are searching for all users and we want just a list of their names. The search query below is what we use to find it, however it drags a brower name too.
source=okta:event actors{}.displayName=*
exampleUser
exampleBrowser
When that query is returned, it provides us with the name of the user which is what we want but also displays the browser they used.
Just to be clear, the browser information isn't tied to the one field and just appears at the end. There are just two identical fields called actors{}.displayName, one displays a browser the other a name.
... View more