Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Regex help for indexing sourcetype

$
0
0
Hi, I'm struggling to create a regex to capture all the information correctly from a sourcetype we have and make them into interesting fields. The structure of the logs is: username: "User1"; companyName: "Company 4"; etc etc Where there's no information within the field it remains empty "". When trying it doesn't seem to pick up all results :( Please help.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>