Only pick value part of key pair using select_jsonpath function

Graylog Central (peer support)
1

Hi,

is it possible to only select the value part of a json key pair when using select_jsonpath function?

I’m picking the timestamp key pair and need to pass it onto parse_date but need to strip the value part only. I’m using split() at the moment to strip the actual timestamp but is it possible to pick the value part only using select_jsonpath() ?

2

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.