Expand JSON fields using spath

index=<your JSON index>
| spath input=<your field w/ nested JSON data> path={}
| mvexpand {}
| spath input={}
Share This:
Tagged:

Leave A Comment?