Skip to content

Custom search command requires | spath to parse JSON fields #9

@mike-mcgrail

Description

@mike-mcgrail

Adding | spath to every search is not intuitive. While inputs can index JSON fields, search command does not run through pipelines and thus requires | spath to parse.

Potential solution is to create records, iterate through JSON fields and add each key=value to records (e.g. self.add_field(record, k, v)). This introduces two design considerations:

  1. _raw needs to be defined to display in search results.
  2. Performance and overhead of additional looping.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions