Replies: 3 comments 3 replies
-
Have a look at the |
Beta Was this translation helpful? Give feedback.
2 replies
-
but there is an incident
my script return:
flatten return:
flatten do not parse list |
Beta Was this translation helpful? Give feedback.
1 reply
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hello,
Case:
json:
logs = {"time": "2023-02-16T15:57:07.523036823Z", "auth": {"display_name": "root", "policies": ["root"], ' \ '"policy_results": { "allowed": True, "granting_policies": [ {"name": "root", "namespace_id": "root", ' \ '"type": "acl" } ] }, "token_type": "service" }, "request": { "operation": "help", "mount_type": "ldap", ' \ '"namespace": { "id": "root" }, "path": "auth/ldap/" }}
how to get this result with VRL:
{".time": "2023-02-16T15:57:07.523036823Z", ".auth_display_name": "root", ".auth_policies_root": "root", ".auth_policy_results_allowed": "True", ".auth_policy_results_granting_policies_name": "root", ".auth_policy_results_granting_policies_namespace_id": "root", ".auth_policy_results_granting_policies_type": "acl", ".auth_token_type": "service", ".request_operation": "help", ".request_mount_type": "ldap", ".request_namespace_id": "root", ".request_path": "auth/ldap/"}
with python:
responce:
Beta Was this translation helpful? Give feedback.
All reactions