So I've got an event that has an array of key values like so in a column called associated :
associates: [
{
type: a
person: person1
},
{
type: b
person: person2
},
{
type: b
person: person3
},
{
type: c
person: person3
}...]
Now I can pull out all of the people associated with an issue doing the following:
| rename associated{}.person as all_associates
And pull out the "first" associate person like so
| eval dathuman=mvindex(all_assoicates, 0)
But, what I want to do is pull out just the associates of a particular type. So, something that get's me all the associates of type "b" only.
What's the best way to do that?
... View more