Quantcast
Viewing all articles
Browse latest Browse all 47296

Field Extraction Problem

Hey, Splunkers I'm having issues attempting a field extraction. The field extraction with appending data is a complete string based. Example: Signature ( Apple) Signature (Orange) The variable in the parenthesis are the "*" in this example and Signature is my field. I'm having issues extracting these fields, because the value in the parenthesis can be entire sentences Example: signature (apple) signature(i went to the store to purchase, orange, kiwi, and coconuts) I'm guessing spunks algorithm cannot process complex strings as "*"?

Viewing all articles
Browse latest Browse all 47296

Trending Articles