Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to extract a string from a field that contains letters, numbers and characters?

$
0
0
731/5000 How to extract a field that can contain letters, numbers and characters, as in the example below? The field to extract is the policyName that always comes preceded by the instanceId field. Ex: policyName = Unrestricted Inbound Access on network security groups instanceId = 5313 policyName = Unrestricted MongoDB Access in network security groups instanceId = 5313 policyName = [Exchange] - CPF totalMatchCount = 12 instanceId = 5319 policyName = Unencrypted OS disks instanceId = 5313 policyName = Check Disable Telnet (port 23) access on Network Security Groups from Internet instanceId = 5313 I have tried several ways, but it is only extracting the first word after the "=" sign, eg. "[Exchange]", "Unrestricted", etc ... Can anyone help? Thank you very much in advance.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>