Hi Team
I have requirement to get api's triggered by per custkey in a single query
query 1:
/token host="test-host-*" custkey="*-*-*" | stats values(transid) as transid by custkey
Note: transids are possible to have more than. one per custmkey
output looks like below
----------------------------------------
| custkey | transid |
----------------------------------------
| sdsdamndka | dkjndkwndkw |
| | ljdosjdowqsj |
----------------------------------------
| hdshsihdiwh | ndskndkndkq |
----------------------------------------
query 2:
some-srting (transid from query 1 output) | stats list(bearer)
output looks like below
euwgw4f56vxevd7vst6q8qq
query 3:
(bearer from query 2) "test-host-*" | table apis, token_api_status
output looks like below
-----------------------------
apis | token_api_status |
-----------------------------
| /api/te1 | 200 |
-----------------------------
| /api/te2. | 200. |
-----------------------------
| /api/te3 | 400 |
-----------------------------
I want to get all apis list and token_api_status per custmkey as shown below using a single query
-----------------------------------
custkey | apis | token_api_status |
-----------------------------------
dhsjhds | /api/te1 | 200 |
| /api/te2 | 200 |
------------------------------------
rufidfhj | /api/jh1 | 200 |
| /api/jh2 | 200 |
--------------------------------------
So, Here I want relate custkey (query 1) with apis, token_api_status,
could you please help me to achieve this.
... View more