Hi
I am trying to extract various fields from below entry in splunk.
I executed the below splunk query :
index=test_index source="testlogs.log" "InteractionId=test_interaction_id1" | search("||url") | table service,operation,status,status_code,exception,duration,url,request, response
The below is splunk log entry:
2019-02-28 22:21:34.248 [UUID=d791aecb-c320-453a-9207-bf96e01beaaf|InteractionId=test_interaction_id1] INFO com.test.MyLogger - service="TestService"||operation="testOperation"||url="http://localhost:8080/testservice/v4/testOperation"||request="{\"customer\":{\"id\":\"80\",\"name\":\"John\"}}"||request_headers="{Content-Type=application/json,cache-control=no-cache,Accept=application/json}"||response="{\"customerType\":\FIXED\"}"||response_headers="{Set-Cookie=;secure;HttpOnly}"||status="SUCCESS"||status_code="200"||duration="95ms"
request and response fields which are XML or JSON are not displayed properly in the table.
XML is displayed as
↧