Hello. Quick Cribl Search question… Am I able to search for the key value pairs found under _raw in a query? I'm attempting to use it for Cloudtrail and here's an example of the structure.
Solved
Am I able to search for the key value pairs found under _raw in a query?
Best answer by Justin Hamblin
yup, sounds like a use-case for the `extract` operator
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
