# Process a line with multiple Services\\Status \\n

**URL:** <https://community.dynatrace.com/t/process-a-line-with-multiple-services-status-n/53554>\
**Category:** DQL\
**Tags:** dql, log-processing, timestamps\
**Created:** [September 29, 2025, 2:46pm UTC](https://community.dynatrace.com/t/process-a-line-with-multiple-services-status-n/53554 "2025-09-29T14:46:23Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![CTull](https://avatars.discourse-cdn.com/v4/letter/c/da6949/32.png) [@CTull](https://community.dynatrace.com/u/CTull)\
**Post date:** [September 29, 2025, 2:46pm UTC](https://community.dynatrace.com/t/process-a-line-with-multiple-services-status-n/53554/1 "2025-09-29T14:46:23Z")

</div>

I have something similar to pull in for a health check on services.

Example JSON.

{  
“event.type”: “LOG”,  
“content”: “Last Modified at: ,2025-08-29 08:25:03.747519\nservice1,Good\nservice2,Good\nservice3,Good\nservice4,Bad”,  
“status”: “NONE”,  
“timestamp”: “1759152303747”,  
“dt.entity.host”: “HOST-123456”,  
“dt.host\_group.id”: “DEV”,  
“log.source”: “D:\\WebApplications\\service\\HealthCheck\\Data.txt”,  
“loglevel”: “NONE”,  
“dt.cost.costcenter”: “Services”,  
“dt.entity.host\_group”: “HOST\_GROUP-123456789”,  
“dt.openpipeline.pipelines”: “logs:default”,  
“dt.openpipeline.source”: “oneagent”

Processor Def:  
PARSE (content, “LD ‘at: ,’ TIMESTAMP(‘yyyy-MM-dd HH:mm:ss.f’):last\_time\_modified ‘\’”)  
| PARSE(content, “LD TIMESTAMP STRING DATA STRING:Service\_Status”)

Any ideas how I can get these services\status into a variable to be able to alert and generate the title or description with the variables if one of the 4 services\status is BAD?

Also with the new logging in the Gen3 view how do we do event alerting etc. without using classic log process?

---

<div class="post-metadata">

**Author:** ![CTull](https://avatars.discourse-cdn.com/v4/letter/c/da6949/32.png) [@CTull](https://community.dynatrace.com/u/CTull)\
**Post date:** [September 29, 2025, 5:52pm UTC](https://community.dynatrace.com/t/process-a-line-with-multiple-services-status-n/53554/2 "2025-09-29T17:52:50Z")

</div>

Yes, I can make an event extraction for each service and its status to trigger with service,bad and generate an alert but the page is dynamic and updates are made often.&nbsp; Each event extraction would then be static and always manual updates.&nbsp; While I want this to be as dynamic as possible to be able to handle additional services as necessary as the service list grows.

---

<div class="post-metadata">

**Author:** ![izabelarokita](https://avatars.discourse-cdn.com/v4/letter/i/b487fb/32.png) [@izabelarokita](https://community.dynatrace.com/u/izabelarokita)\
**Post date:** [December 17, 2025, 1:11pm UTC](https://community.dynatrace.com/t/process-a-line-with-multiple-services-status-n/53554/3 "2025-12-17T13:11:50Z")

</div>

Hey&nbsp;[@CTull](https://community.dynatrace.com/user/29962)&nbsp;,  
I just wanted to check in and see if you still need help with this. If so, I’d be happy to look into it for you!&nbsp;:blush:  
Please let me know what works best for you.