I have a situation where I am attempting to take some flat json input and provide some contextual information that is needed for API ingest. In the below example, I am trying to add some hardcoded keys into an array.
I've searched quite a bit but haven't seen this specific question asked.
JSON input
{
"hostname": "computername",
"user": "DOMAIN\\User",
"full_name": "lastname firstname",
"login_name": "DOMAIN\\User",
"user_email": "[email protected]"
}
Expected outcome:
{
"entities": [
{
"role": "hostname",
"entities": [
"computername"
]
},
{
"role": "user",
"entities": [
"DOMAIN\\User"
]
},
{
"role": "full_name",
"entities": [
"lastname firstname"
]
},
{
"role": "login_name",
"entities": [
"DOMAIN\\User"
]
}
],
"user_email": "[email protected]"
}
Any help would be greatly appreciated!
