{ "message": {
"correlation": "12345678",
"headers": {},
"protocol": "HTTP/1.1",
"remote": "111.11.11.111",
"requestMethod": "GET",
"requestPath": "/abc/<dynamic_value>/xyz",
"type": "request" } }
Here from "message.requestMethod" and "message.requestPath" I need to find unique combinations and give some name to it. "message.requestPath" can have different endpoints.
Tried something like below which is not working:
searchquery | eval api = case (message.requestMethod = GET AND message.requestPath="/abc/<dynamic_value>/xyz", "GET_VERSION_API", message.requestMethod = POST AND message.requestPath="/abc/<dynamic_value>/xyz", "POST_VERSION_API", 1 = 1, "default") | stats count by api
... View more