| rest splunk_server=local /servicesNS/nobody/SA-ITOA/itoa_interface/service fields="title,_key,kpis"
| spath input=value path={} output=svcs | mvexpand svcs
| fields - value
| spath input=svcs path=kpis{} output=kpis
| spath input=svcs path=title output=service_title
| spath input=svcs path=kpis{} output=kpi | fields - svcs, kpis
| mvexpand kpi
| spath input=kpi path=search_type output=search_type
| spath input=kpi path=type output=type
| spath input=kpi path=title output=kpi_title
| spath input=kpi path=base_search output=base_search
| spath input=kpi path=base_search_id output=base_search_id
| spath input=kpi path=_key output=search_id
| search type!=service_health
| fields service_title kpi_title search_type base_search_id search_id base_search