Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Regex Help! "Extracting word before column"

$
0
0
Events: com.texh.servers.policy.assertion.ServerAuditDetailAssertion: 9879: com.texh.log.custom.Applications: 9999: com.texh.log.custom.paymentRedirects: 8800: com.texh.log.custom.Permission: 9999: com.texh.logs.system.Application: asjdbfd ksfdkjn dkjfn kdf: com.texh.logs.policy.assertion: 0880: | rex field=_raw "^(?:[^ \n] ){6}(?P[^ ]+)" and "^(.\w?):" I tried above but its not correct I need to extract these ServerAuditDetailAssertion, Applications paymentRedirects Permission Application assertion and do stats. Can Someone help me on this?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>