CODEWITHSUNDEEP
splunksplunk-query
user1733735
user1733735

Reputation: 453

Table from logs in Splunk

I have an array of values coming directly from database from table with columns ("Name", "Email","ProductId", Quantity). The data looks like this:

{'data':[
    ('Tom', '[email protected]','P1231', 50),
    ('Rob', '[email protected]','P6431', 100),
    ('Nick', '[email protected]','P3231', 40),
    ('Li', '[email protected]','P1231', 60)]}

I want to use this array from the logs and display as a table or as a chart in dashboard in Splunk. Does someone know if this is possible in Splunk Enterprise. For eg

Name           Email           ProductId     Quantity
Tom    [email protected]        P1231         50
Rob    [email protected]         P6431        100
Nick   [email protected]         P3231         40
Li     [email protected]         P1231         60

Upvotes: 1

Views: 587

Answers (1)

Simon Duff
Simon Duff

Reputation: 2651

| spath | table *

spath is used to extract information from structured data (JSON, XML, etc...)

You may also wish to specify the exact fields you are after in the table, rather than use *

Are you using dbconnect to bring this data in, or ingesting it in some other manner?

Upvotes: 0

Related Questions