Re: [ask] create profile for profiler with multiple fields on foreach

2019-07-17 Thread Simon Elliston Ball
> > The expression provided in foreach statement is not valid. It should > resolve to single object string. > > > > Thanks, > > Anil. > > > > *From:* Youzha [mailto:yuza.ras...@gmail.com] > *Sent:* Wednesday, July 17, 2019 9:17 PM > *To:* user@metr

RE: [ask] create profile for profiler with multiple fields on foreach

2019-07-17 Thread Anil Donthireddy
Hi, The expression provided in foreach statement is not valid. It should resolve to single object string. Thanks, Anil. From: Youzha [mailto:yuza.ras...@gmail.com] Sent: Wednesday, July 17, 2019 9:17 PM To: user@metron.apache.org Subject: [ask] create profile for profiler with multiple fields

[ask] create profile for profiler with multiple fields on foreach

2019-07-17 Thread Youzha
Hi, it is possible to use multiple fields inside foreach on profiler ? i’ve try using AND like below but it failed. pls help { "profiles": [ { "profile": "hello-world", "onlyif": "exists(ip_src_addr) AND exists(ip_dst_addr)", "foreach": "ip_src_addr AND ip_dst_addr,