Logfile Extension and Regular Expressions

Hoosain_Madhi — Tue, 05 Apr 2022 12:09:32 GMT

how do I use a regular expression to match a pattern in a logfile - I am using LogFile extension

for example from the following line specific to a "Response" msg

{"remoteHost":"epdg","epoch":1648084954231,"command":"Response","Result-Code",{"value":1001}},"statusCode":"2001","status":"FOO ","timestamp":"2022-03-24 03:22:34.231"}

can I use a regular expression to find statusCode NOT 2001 indicating a failure - If so what regex should I use?

cant seem to find documentation

Re: Logfile Extension and Regular Expressions

Hoosain_Madhi — Thu, 07 Apr 2022 06:19:02 GMT

After looking at all possible statusCodes the regex I came up with is :

.*"command":"Response".*"statusCode":"[1|3|4|5].*".*

I am not sure on what to put in the config.yml – any ideas?

- displayName: "Diameter-EAP-Response-Failures"

pattern: "?????"

matchExactString: false

caseSensitive: false

printMatchedString: false

topic Logfile Extension and Regular Expressions in Splunk AppDynamics

Logfile Extension and Regular Expressions

Re: Logfile Extension and Regular Expressions