Question

我有一份记录单,有这样的条目:

{"@timestamp":"2024-02-28T10:21:51.939Z", "log.level":"info", "msg": "done"}

我想把这支 j子变成这样的东西:

2024-02-28T10:21:51.939Z - info - done

This is the output I get from my shell commands:

$ msg= {"@timestamp":"2024-02-28T10:21:51.939Z", "log.level":"info", "msg": "done"} 

$ echo $msg | jq -r  "(.["log.level"])" 
jq: error: syntax error, unexpected INVALID_CHARACTER (Unix shell quoting issues?) at <top-level>, line 1:
"(.["log.level"])"     
jq: 1 compile error

$ echo $msg | jq -r  "(.msg)" 
done

$ echo $msg | jq -r  "(.["@timestamp"])" 
jq: error: syntax error, unexpected INVALID_CHARACTER (Unix shell quoting issues?) at <top-level>, line 1:
"(.["@timestamp"])"     
jq: 1 compile error

$ echo $msg | jq -r  "(.@timestamp)" 
jq: error: syntax error, unexpected QQSTRING_INTERP_END, expecting QQSTRING_START (Unix shell quoting issues?) at <top-level>, line 1:
"(.@timestamp)"              
jq: error: try .["field"] instead of .field for unusually named fields at <top-level>, line 1:
"(.@timestamp)"   
jq: 2 compile errors

I m在乌班图使用巴什。 jq-1.6

Answer 1

奥基,我确定了我自己的问题。与手册不同的是,你不必逃脱。

$ echo $msg | jq -r  "(.["@timestamp"])" 
2024-02-28T10:21:51.939Z

$ echo $msg | jq -r  "(.["log.level"])" 
info

Answer 2

以下是一些途径:

# if you don t like working with blackslashes
echo $msg | jq -r  [.["@timestamp","log.level","msg"]]|join(" - ")          

# if you want all the values (which in your case you do)
echo $msg | jq -r  values|join(" - ") 

# to_entries if you want to manipulate value
echo $msg | jq -r  to_entries|map(.value)|join(" - ") 
echo $msg | jq -r  to_entries|map(.value|ascii_upcase)|join(" - ")

友情链接