Hey all! Has anyone pulled Sumo Logic User lists and used Event Transformations to Explode the content? Getting:

Value at <X> is not an array or does not exist

As the return output is a huge list which is sub-divided into Arrays containing JSON, kinda like:

{
"get_a_list_of_users_in_sumo_logic":
{
"body":
{
"data":
[

{
"firstName":"X",
"lastName":"X",
"email":"X",
"roleIds":
[
],
"createdAt":"X",
"createdBy":"X",
"modifiedAt":"X",
"modifiedBy":"X",
"id":"X",
"isActive":true,
"isLocked":false,
"isMfaEnabled":false,
"lastLoginTimestamp":"X"
},

Followed by the next user etc.. Im not sure if I am using Explode correctly here

Hmm! This is working for me:

{
  "agents": [
    {
      "disabled": false,
      "name": "get a list of users in sumo logic",
      "options": "{\"mode\":\"message_only\",\"loop\":false,\"payload\":{\"body\":{\"data\":[{\"firstName\":\"X\",\"lastName\":\"X\",\"email\":\"X\",\"roleIds\":[],\"createdAt\":\"X\",\"createdBy\":\"X\",\"modifiedAt\":\"X\",\"modifiedBy\":\"X\",\"id\":\"X\",\"isActive\":true,\"isLocked\":false,\"isMfaEnabled\":false,\"lastLoginTimestamp\":\"X\"},{\"firstName\":\"X\",\"lastName\":\"X\",\"email\":\"X\",\"roleIds\":[],\"createdAt\":\"X\",\"createdBy\":\"X\",\"modifiedAt\":\"X\",\"modifiedBy\":\"X\",\"id\":\"X\",\"isActive\":true,\"isLocked\":false,\"isMfaEnabled\":false,\"lastLoginTimestamp\":\"X\"},{\"firstName\":\"X\",\"lastName\":\"X\",\"email\":\"X\",\"roleIds\":[],\"createdAt\":\"X\",\"createdBy\":\"X\",\"modifiedAt\":\"X\",\"modifiedBy\":\"X\",\"id\":\"X\",\"isActive\":true,\"isLocked\":false,\"isMfaEnabled\":false,\"lastLoginTimestamp\":\"X\"}]}}}",
      "position": {
        "x": 60,
        "y": 195
      },
      "type": "eventTransformation"
    },
    {
      "disabled": false,
      "name": "Explode",
      "options": "{\"mode\":\"explode\",\"path\":\"{{get_a_list_of_users_in_sumo_logic.body.data}}\",\"to\":\"individual_item\"}",
      "position": {
        "x": 60,
        "y": 345
      },
      "type": "eventTransformation"
    }
  ],
  "links": [
    {
      "sourceIdentifier": 0,
      "receiverIdentifier": 1
    }
  ],
  "diagramNotes": []
}

Hey Thomas! Apologies, I am being dumb but I see your Event Transform is not a HTTP request to Sumo?

yeah, sorry - i just mocked up the request so that the data would look the same

OK sorry so how would I apply that to my story?

the

get a list of users in sumo logic

format should be identical

🙂 Thank you!

you're welcome 🙂

✋ 5️⃣