Dear team , i want to extract the details ,description,sourceDescription and map to other fields . here i am using the http_poller plug in .i need the filter section , can anyone help here ?i have tried in multiple ways , but didnt worked .
{
"incidents" => [
[ 0] {
"details" => "Entuity Server disconnected from network? ",
"state" => "open",
"objectKeyInfo" => {
"swId" => 0,
"compId" => {
"ids" => [
[0] 2048,
[1] 2130706433,
[2] 0,
[3] 0
]
}
},
"eventCount" => 3,
"timeStamp" => 1718275681,
"extraAttribs" => nil,
"severity" => 10,
"sourceDescription" => "127.0.0.1",
"impactDescription" => "",
"id" => 4,
"annotation" => nil,
"description" => "Network Outage"
},
[ 1] {
"details" => "Process [diskmonitor]",
"state" => "open",
"objectKeyInfo" => {
"swId" => 0,
"compId" => {
"ids" => [
[0] 4096,
[1] 0,
[2] 0,
[3] 0
]
}
},
"eventCount" => 5,
"timeStamp" => 1719111431,
"extraAttribs" => nil,
"severity" => 10,
"sourceDescription" => "Entuity server DESKTOP-CE118LN",
"impactDescription" => "",
"id" => 6,
"annotation" => nil,
"description" => "Entuity Server Component Problem"
},
[ 2] {
"details" => "ifIndex=16",
"state" => "open",
"objectKeyInfo" => {
"swId" => 901,
"compId" => {
"ids" => [
[0] 1,
[1] 1,
[2] 14,
[3] 0
]
}
},
"eventCount" => 1,
"timeStamp" => 1719123783,
"extraAttribs" => nil,
"severity" => 10,
"sourceDescription" => "192.168.91.1 [ wireless_32768 ] Intel(R) Wi-Fi 6 AX201 160MHz",
"impactDescription" => "",
"id" => 19,
"annotation" => nil,
"description" => "Port Status Problem"
},
}