Skip to main content
Question

Any idea how I can add a field with its value to an existing field?

  • March 11, 2025
  • 3 replies
  • 31 views

Hi, any idea how I can add a field with its value to an existing ? In this example operationName should be added under properties.

3 replies

Forum|alt.badge.img
  • Participating Frequently
  • March 11, 2025

Yeah, the field name has to be properties.operationName


David Maislin

And for those that are new to Cribl you could do it like this where my 1st function is just creating the fields and the event with an Eval Function and the 2nd function is a rename. There are countless ways to do this, but I figured I would share.


  • Author
  • Employee
  • March 11, 2025

omg .... to easy ... thank you very much!