Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Field extraction.

$
0
0
I have a raw event like this for each order, if a user buys two products of different units how can I tie each product to a specific quantity. Items: [ [-] { [-] commitCode: 2 deliveryType: partNumber: P123 product: 3 Wireless Phone promos: [ [-] Auto dependency ] qty: 10 resolvedDate: 04/04/04 shipMethodCode: A8 } { [-] commitCode: 2 deliveryType: th partNumber: P345 product: Pen promos: [ [+] ] qty: 1 resolvedDate: 04//04/04。 shipMethodCode: A8 } I want to calculate the quantity of each product, but when I extracted qty and do stats count by PartNumber. It is giving incorrect events. Can someone help me how to work a way around that. Thanks for your time.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>