I need to map specifically internet message ids from the Office 365 logs. Issue is in the mailitemsaccess logs that are bind events, multiple internet message ids can be captured within a single json path. I need to be able to iterate through and grap all the internet message IDs and map them to say additional.fields["InternetMessageIDs"]. Sometimes there can be up to 10 IDs within one log. I would like for them to be captured as additional.fields["InternetMessageIDs[0]"] or something similar when I use the extract function built in. It will only grab the first 5 IDs though so it has a limitation. Example of how it captures the data.
extracted.fields["Folders[0].FolderItems[0].InternetMessageId"]
extracted.fields["Folders[0].FolderItems[1].InternetMessageId"]
extracted.fields["Folders[0].FolderItems[2].InternetMessageId"]
and so on.
Not really sure of where to start on this as I have created basic extensions but nothing this complicated. Google support has not been that great a help with this either so far hence why I am trying to tackle this myself.
LinkedIn
Twitter
