Hi all.
I am trying to figure out how to get following data displayed as a table.
I’am testing this following query, but always get “error 500. Invalid query”. Where Am I wrong?
{origin=“MYORIGIN”} | json
| line_format “{{.Time}} {{.CallDuration}} {{.IngressCallingUserName}} {{.EgressCallingUserName}} {{.IngressCallSourceIp}} {{.EgressCallDestIp}}”
Here entire JSON of query if I only use
{origin=“MYORIGIN”}
[
{
“schema”: {
“refId”: “A”,
“meta”: {
“typeVersion”: [
0,
0
],
“custom”: {
“frameType”: “LabeledTimeValues”,
“lokiQueryStatKey”: “Summary: total bytes processed”
},
“executedQueryString”: “Expr: {origin="MYORIGIN"}”,
“preferredVisualisationType”: “logs”,
“limit”: 1000,
“searchWords”:
},
“fields”: [
{
“name”: “labels”,
“type”: “other”,
“typeInfo”: {
“frame”: “json.RawMessage”
},
“config”: {}
},
{
“name”: “Time”,
“type”: “time”,
“typeInfo”: {
“frame”: “time.Time”
},
“config”: {}
},
{
“name”: “Line”,
“type”: “string”,
“typeInfo”: {
“frame”: “string”
},
“config”: {}
},
{
“name”: “tsNs”,
“type”: “string”,
“typeInfo”: {
“frame”: “string”
},
“config”: {}
},
{
“name”: “id”,
“type”: “string”,
“typeInfo”: {
“frame”: “string”
},
“config”: {}
}
]
},
“data”: {
“values”: [
[
{
“CallDuration”: “70.66”,
“Day”: “Mon”,
“EgressCallDestIp”: “192.168.10.1”,
“EgressCalledUserName”: “1000”,
“EgressCallingUserName”: “2000”,
“EgressSIPTrmReason”: “BYE”,
“EgressSipInterfaceName”: “Telecom”,
“EgressTrmReason”: “GWAPP_NORMAL_CALL_CLEAR”,
“IngressCallSourceIp”: “192.168.10.1”,
“IngressCallingUserName”: “2000”,
“IngressDialedUserName”: “1000”,
“IngressSipInterfaceName”: “Telecom”,
“Internal_Seq”: “181”,
“Month”: “Aug”,
“Monthday”: “26”,
“NodeTimeZone”: “UTC”,
“ProductName”: “Mediant SW”,
“RecordType”: “STOP”,
“RouteAttemptNum”: “0”,
“SDR_Seq_Num”: “5”,
“SeqNum”: “8”,
“SetupTime”: “11:29:25.817”,
“ShelfInfo”: “183”,
“SipSessionId”: “81a539:183:44”,
“TimeToConnect”: “10.81”,
“TimeZone”: “UTC”,
“Year”: “2024”,
“host”: “192.168.10.11”,
“origin”: “MYORIGIN”,
“tags”: “CDR”,
“type”: “undefined”,
“udp_port”: “514”
}
],
[
1724664648012
],
[
“<181>[S=5] |STOP |Mediant SW |183 |8 |81a539:183:44 |11:29:25.817 UTC Mon Aug 26 2024|1081 |7066 |UTC |2000 |2000 |1000 |1000 |192.168.10.1 |192.168.10.1 |GWAPP_NORMAL_CALL_CLEAR |BYE |Telecom |Telecom |0”
],
[
“1724664648012000000”
],
[
“1724664648012000000_f979a001”
]
]
}
}
]
]