I have JSON object data, which should be represented in qliksense. I have following file as SimpleJS1.txt
{
"ALERT1": {
"Result": [
{
"SEARCH_STR": "",
"Search_Result": [
{
"Result_id": 0,
"event_str": "More Than 5 Malicious IP Allowed Through Firewall Within Last 30 Minutes",
"malicious_ip": "184.25.109.26",
"tl_group": "win_ev",
"tl_tag": "tl_alert"
}
]
}
],
"SEARCH1": {
"Result": [
{
"SEARCH_STR": "tl_tag:FortiGateFirewall AND malicious_ip",
"Search_Result": [
{
"dstip": "10.1.96.250",
"malicious_ip": "10.1.96.250",
"result_id": 0,
"srcip": "10.1.41.206",
"time_stamp": "1471424500"
},
{
"dstip": "10.1.96.250",
"malicious_ip": "10.1.96.250",
"result_id": 1,
"srcip": "10.1.41.206",
"time_stamp": "1471424000"
}
]
}
],
"SEARCH2": {
"Result": [
{
"SEARCH_STR": "tl_tag:FortiGateFirewall AND dstip:10.1.96.250 AND malicious_ip:10.1.96.250",
"Search_Result": [
{
"dstip": "10.1.96.250",
"malicious_ip": "10.1.96.250",
"result_id": 0,
"srcip": "10.1.41.206",
"time_stamp": "1471424500"
},
{
"dstip": "10.1.96.250",
"malicious_ip": "10.1.96.250",
"result_id": 1,
"srcip": "10.1.41.206",
"time_stamp": "1471424000"
}
]
}
]
}
}
}
}
