Part 3: Interacting with Enumerated Fields - Video 4

There are multiple ways to access enumerated fields when building a data pipeline in Gravwell;
let's use our already familiar “Employees” information to illustrate.

Query 6:
We aren’t sure what column a particular piece of data (the ip_addr) assigned to a user resides in, we’ll try out the words search processing module

tag=envolvelabs-Employees ax
| words "192.168.0.44"
| table

Query 7:
Lets query for something specific using a comparison, “ == ”, operator, we know the field we are looking for is the “ ip_addr ” field

tag=envolvelabs-Employees ax ip_addr == 192.168.0.44
| table

TOP