Hi... I have this Item that GET a JSONextracted from my elasticsearch DB.
I made a discovery rule, with this JSON as dependent item.
What i need to extract is the key and doc_count of each bucket, but i don't know how to express the "changing field"
I need all of them...:
$.aggregations.2.buckets.[1].key
$.aggregations.2.buckets.[2].key
$.aggregations.2.buckets.[3].key
and so on....
How do i put on a LLD macro, that i want
$.aggregations.2.buckets.["1 to n"].key ??
I hope u can understand
Here is my Json
----------------------------------------------------------------------------------
{
"took" : 836,
"timed_out" : false,
"_shards" : {
"total" : 183,
"successful" : 183,
"skipped" : 173,
"failed" : 0
},
"hits" : {
"total" : {
"value" : 376,
"relation" : "eq"
},
"max_score" : null,
"hits" : [ ]
},
"aggregations" : {
"2" : {
"doc_count_error_upper_bound" : 0,
"sum_other_doc_count" : 0,
"buckets" : [
{
"key" : "log4net-censoindepsitioma-2020.06.16",
"doc_count" : 165
},
{
"key" : "log4net-cfdenuncia.sitio-2020.06.16",
"doc_count" : 97
},
{
"key" : "log4net-miansessitio-2020.06.16",
"doc_count" : 89
},
{
"key" : "log4net-adp.sitio-2020.06.16",
"doc_count" : 14
},
{
"key" : "log4net-lupa.sitio-2020.06.16",
"doc_count" : 11
}
]
}
}
}
----------------------------------------------------------------------------------
I made a discovery rule, with this JSON as dependent item.
What i need to extract is the key and doc_count of each bucket, but i don't know how to express the "changing field"
I need all of them...:
$.aggregations.2.buckets.[1].key
$.aggregations.2.buckets.[2].key
$.aggregations.2.buckets.[3].key
and so on....
How do i put on a LLD macro, that i want
$.aggregations.2.buckets.["1 to n"].key ??
I hope u can understand
Here is my Json
----------------------------------------------------------------------------------
{
"took" : 836,
"timed_out" : false,
"_shards" : {
"total" : 183,
"successful" : 183,
"skipped" : 173,
"failed" : 0
},
"hits" : {
"total" : {
"value" : 376,
"relation" : "eq"
},
"max_score" : null,
"hits" : [ ]
},
"aggregations" : {
"2" : {
"doc_count_error_upper_bound" : 0,
"sum_other_doc_count" : 0,
"buckets" : [
{
"key" : "log4net-censoindepsitioma-2020.06.16",
"doc_count" : 165
},
{
"key" : "log4net-cfdenuncia.sitio-2020.06.16",
"doc_count" : 97
},
{
"key" : "log4net-miansessitio-2020.06.16",
"doc_count" : 89
},
{
"key" : "log4net-adp.sitio-2020.06.16",
"doc_count" : 14
},
{
"key" : "log4net-lupa.sitio-2020.06.16",
"doc_count" : 11
}
]
}
}
}
----------------------------------------------------------------------------------