Hi all,
I have an index pattern with list format data as below:
linkedGPO's
{
"name": "Password and lockout policy",
"enabled": true,
"enforced": false
},
{
"name": "Screen Saver Lockout Policy",
"enabled": true,
"enforced": true
},
{
"name": "Autodiscover Fix",
"enabled": true,
"enforced": false
},
{
"name": "Lockout Settings",
"enabled": true,
"enforced": false
}
I am not getting correct data for count
For example if i take count of linkedGPO's.enabled:true,
then only first value of list is considered and get wrong total as below.
As you can see, total is different from enabled and disabled GPO's.
Dont know how to work with Listed Fields as sometimes, only 1st value is considered.