14 Feb 2025 11:21 AM
this is the sample json format need DQL to fetch logs if imported is 11 based on the ID
{
"ID": {
"ID": "ghghgghgh",
"Type": "jj"
},
"Fruits": {
"Character": {
"color":"red"
"taste": bitter,
},
"Types": {
"imported": [
11
],
"isavailable": "False",
}
}
}
17 Feb 2025 03:16 PM
Hi,
I'm not sure I fully understand, but you can automatically parse JSON and then filter it like this:
data json:"""{
"ID": {
"ID": "ghghgghgh",
"Type": "jj"
},
"Fruits": {
"Character": {
"color": "red",
"taste": "bitter"
},
"Types": {
"imported": ["11"],
"isavailable": "False"
}
}
},"""
| parse Fruits[Types][imported][0], "INT:event"
| filter Fruits[Types][imported][0] == "11"