Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How do I edit my rex statement to extract fields from a raw string of repeated text into a table?

$
0
0
Used the following command `rex "(?\d+)\[(?\-?\d+\.?\d+)\]"| table ...`, but the entire string gets extracted into a single column. Raw String in the Log: Status{AdId='313131313', reason='ERROR_400', externalError='null'},Status{AdId='313131313', reason='ERROR_500', externalOfferId='null'} Desired table AdId reason externalError 313131313 ERROR_400 null 313131313 ERROR_500 null

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>