how filter fields separated by dashes

[gatspy]

fblog -f 'method=="POST" and header.X-Customer-Id[1]=="123456"' -a body -a res_body req.log

{
  "header":{
      "X-Tenant-Id": ["123456"]
  }
}

[bomgar]

You can use --print-lua to see what variables fblog creates. In your example it looks like this:

header = {X_Tenant_Id = {"123456","343434"}}

So with your example this seems to work:

» cat sample_array_dashes.json
{"header":{"X-Tenant-Id": ["123456", "343434"]}}
» fblog --print-lua -f 'header.X_Tenant_Id[1] == "123456"' -d sample_array_dashes.json
header = {X_Tenant_Id = {"123456","343434"}}
                    UNKNO:
  header > X-Tenant-Id[1]: "123456"
  header > X-Tenant-Id[2]: "343434"

I haven't encountered arrays in log files yet so there is probably room for improvement. Let me know.

[bomgar]

I added --print-lua to the readme

[gatspy]

@bomgar thanks, i will try it.