Hi
I want to extract the field names and field values of my events.
My event looks like this:
Step: 1000
Result: blabkbk
Actual: blabblabl
Step: 1100
Result: blabkbk
Actual: blabblabl
I want the field name to be "1000" and "1100"and the respective field values to be everything below them. This is how I set up my props.conf and transforms.conf, but I am not extracting anything. I appreciate your help.
props.conf
[]
REPORT-step_num = step_num
transforms.conf
[step_num]
REGEX = STEP:\s+(?<_KEY_1>/d+)\n(?<_VAL_1>[\w\W\n]+?)\nSTEP
↧