Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

regex to extract fields

$
0
0
My message field look likes below Message=network share object was checked to see whether client can be granted desired access. Subject: Security ID: EMEA\xxxx.xxxxxx Account Name: xxxx.xxxxxxx Account Domain: EMEA Logon ID: xxxxxxxxxx Network Information: Object Type: File Source Address: xx.xx.xx.xxx Source Port: xxxxx Share Information: Share Name: \\*\XX_XX_6_1 I need regex for extracting Security ID, Account Name , Account Domain from this fields,

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>