Table from logs in Splunk

Question

I have an array of values coming directly from database from table with columns ("Name", "Email","ProductId", Quantity). The data looks like this:

{'data':[
    ('Tom', '[email protected]','P1231', 50),
    ('Rob', '[email protected]','P6431', 100),
    ('Nick', '[email protected]','P3231', 40),
    ('Li', '[email protected]','P1231', 60)]}

I want to use this array from the logs and display as a table or as a chart in dashboard in Splunk. Does someone know if this is possible in Splunk Enterprise. For eg

Name           Email           ProductId     Quantity
Tom    [email protected]        P1231         50
Rob    [email protected]         P6431        100
Nick   [email protected]         P3231         40
Li     [email protected]         P1231         60

Simon Duff Simon Duff · Accepted Answer · 2018-10-09T10:07:07

| spath | table *

spath is used to extract information from structured data (JSON, XML, etc...)

You may also wish to specify the exact fields you are after in the table, rather than use *

Are you using dbconnect to bring this data in, or ingesting it in some other manner?

Table from logs in Splunk

1 Answers