The tojson command is a streaming command, which means it operates on each event as it is returned by the search. Default: false output_field Syntax: output_field= Description: Specifies the name of the field to which the tojson search processor writes the output JSON objects. However, if fill_null=true, the tojson processor outputs a null value Default: false include_internal Syntax: include_internal= Description: When set to true, tojson includes internal fields such as _time, _indextime, or _raw in its JSON object output. For example, normally, when tojson tries to apply the json datatype to a field that does not have proper JSON formatting, tojson skips the field. Default: none fill_null Syntax: fill_null= Description: When set to true, tojson outputs a literal null value when tojson skips a value. Default: none(*) default_type Syntax: default_type= Description: Specifies the datatype that the tojson processor should apply to fields that aren't specifically associated with a datatype function. In other words, it applies none(*) to the search. If you provide no fields, the tojson processor creates JSON objects for each event that include all available fields. See Usage for details about how tojson interprets these datatype functions, and how tojson applies datatypes to field values when it converts events into JSON objects. Description: Applies JSON datatype functions to values of named fields. Optional arguments tojson-function Syntax: (). If no fields are specified for tojson, tojson generates JSON objects for all fields that would otherwise be returned by the search. When fields are specifically named in a tojson search, the command generates JSON objects that are limited to the values of just those named fields. The tojson command converts multivalue fields into JSON arrays. You can also apply specific JSON datatypes to field values using datatype functions. You can specify which fields get converted by identifying them through exact match or through wildcard expressions.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |