I would like to show results group by "SLA Request Key". I am able to view sample Data-2 but not Sample Data-1
Sample Data-1:
{"key":"SLA Request Key","value":"mls.ILSP_CONTNR_SKU_INSERT"}]}
Sample Data-2:
{"key":"SLA Request Key","value":"GetPickGroupsByBinLocation"}]}
index = xyz "Database Call Exceeded SLA" | rex field=_raw "SLA Request Key\",\"value\":\"(?\\w+)\"}]}" | stats count by slaKey
when i run this search, i am only getting the results for Sample Data-2(GetPickGroupsByBinLocation) not "mls.ILSP_CONTNR_SKU_INSERT" this. I assume this is not parsing stats count by when value is combined with Dot and Underscore
Can any one please help me?
Thanks in Advance!
↧