Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Regex help

$
0
0
- com.texh.servers.policy.assertion.ServerAuditDetailAssertion: com.texh.log.custom.Applications: com.texh.log.custom.paymentRedirects: com.texh.log.custom.Permission: com.texh.logs.system.Application: com.texh.logs.policy.assertion: | rex field=_raw "^(?:[^ \n]* ){6}(?P[^ ]+)" and "^(.\w*?):" I tried above but its not correct I need to extract these ServerAuditDetailAssertion, Applications paymentRedirects Permission Application assertion to any new field. Can Someone help me on this?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>