Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to parse JSON data at search-time?

$
0
0
I am getting different types of data from source. It can be XML or JSON. For XML, I am just indexing whole file and later at search-time, I am using xmlkv + xpath to parse and get the data that I want. For JSON, I need to index whole file, but is there a way that I can parse at search time similar to the above.?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>