topic Re: Extraction error from log file in Splunk Dev

Extraction error from log file

nagaraju_chitta — Tue, 29 Sep 2020 15:57:19 GMT

All,
would like to extract the below information from the logs
Caused by: org.apache.camel.TypeConversionException: Error during type conversion from type: java.lang.String to the required type: int with value [% JMS_Input_Consumers %] due java.lang.NumberFormatException: For input string: "[% JMS.LOGSBUS.JMS_Input_Consumers %]"
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.createTypeConversionException(BaseTypeConverterRegistry.java:610)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:177)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:156)
at org.apache.camel.util.IntrospectionSupport.convert(IntrospectionSupport.java:622)
at org.apache.camel.util.IntrospectionSupport.setProperty(IntrospectionSupport.java:537)
at org.apache.camel.util.IntrospectionSupport.setProperty(IntrospectionSupport.java:602)
at org.apache.camel.util.IntrospectionSupport.setProperties(IntrospectionSupport.java:459)
at org.apache.camel.util.IntrospectionSupport.setProperties(IntrospectionSupport.java:469)
at org.apache.camel.util.EndpointHelper.setProperties(EndpointHelper.java:256)
at org.apache.camel.impl.DefaultComponent.setProperties(DefaultComponent.java:257)
at org.apache.camel.component.jms.JmsComponent.createEndpoint(JmsComponent.java:886)
at org.apache.camel.impl.DefaultComponent.createEndpoint(DefaultComponent.java:114)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

Out of the above sample would like to extract the below

caused by: org.apache.camel.TypeConversionException
Description: Error during type conversion from type: java.lang.String to the required type: int with value [% JMS_Input_Consumers %] due java.lang.NumberFormatException: For input string: "[% JMS.LOGSBUS.JMS_Input_Consumers %]"
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.createTypeConversionException(BaseTypeConverterRegistry.java:610)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:177)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:156)
at org.apache.camel.util.IntrospectionSupport.convert(IntrospectionSupport.java:622)
at org.apache.camel.util.IntrospectionSupport.setProperty(IntrospectionSupport.java:537)
at org.apache.camel.util.IntrospectionSupport.setProperty(IntrospectionSupport.java:602)
at org.apache.camel.util.IntrospectionSupport.setProperties(IntrospectionSupport.java:459)
at org.apache.camel.util.IntrospectionSupport.setProperties(IntrospectionSupport.java:469)
at org.apache.camel.util.EndpointHelper.setProperties(EndpointHelper.java:256)
at org.apache.camel.impl.DefaultComponent.setProperties(DefaultComponent.java:257)
at org.apache.camel.component.jms.JmsComponent.createEndpoint(JmsComponent.java:886)
at org.apache.camel.impl.DefaultComponent.createEndpoint(DefaultComponent.java:114)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

Any help would be appreciated.

Re: Extraction error from log file

sbbadri — Tue, 29 Sep 2020 16:01:54 GMT

try this,

| makeresults | eval test="Caused by: org.apache.camel.TypeConversionException: Error during type conversion from type: java.lang.String to the required type: int with value [% JMS_Input_Consumers %] due java.lang.NumberFormatException: For input string: \"[% JMS.LOGSBUS.JMS_Input_Consumers %]\"
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.createTypeConversionException(BaseTypeConverterRegistry.java:610)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:177)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:156)
at org.apache.camel.util.IntrospectionSupport.convert(IntrospectionSupport.java:622)
at org.apache.camel.util.IntrospectionSupport.setProperty(IntrospectionSupport.java:537)
at org.apache.camel.util.IntrospectionSupport.setProperty(IntrospectionSupport.java:602)
at org.apache.camel.util.IntrospectionSupport.setProperties(IntrospectionSupport.java:459)
at org.apache.camel.util.IntrospectionSupport.setProperties(IntrospectionSupport.java:469)
at org.apache.camel.util.EndpointHelper.setProperties(EndpointHelper.java:256)
at org.apache.camel.impl.DefaultComponent.setProperties(DefaultComponent.java:257)
at org.apache.camel.component.jms.JmsComponent.createEndpoint(JmsComponent.java:886)
at org.apache.camel.impl.DefaultComponent.createEndpoint(DefaultComponent.java:114)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)" | rex field=test mode=sed "s/(: Error)/ Description: Error/g"

Re: Extraction error from log file

Sukisen1981 — Wed, 27 Sep 2017 06:00:05 GMT

Hi - Try this

| rex field=_raw (?

Re: Extraction error from log file

Sukisen1981 — Wed, 27 Sep 2017 06:44:34 GMT

| rex field=_raw (?

Re: Extraction error from log file

Sukisen1981 — Wed, 27 Sep 2017 06:46:01 GMT

| rex field=_raw (?

Re: Extraction error from log file

Sukisen1981 — Wed, 27 Sep 2017 06:48:06 GMT

sorry some issue. code is not getting pasted..attaching the codelink text

Re: Extraction error from log file

nagaraju_chitta — Tue, 29 Sep 2020 16:02:06 GMT

Hi sbbadri,
Thanks for the quick response. The requirement is I need to get the count for "Caused By" and for each Caused by separation from the sample below. For example in the below sample I have 3 types of Caused by exceptions. So the caused by count should be 3 and I need to display 3 different line of the caused by exceptions say
Caused by count: 3
Cause1 Error: org.apache.camel.TypeConversionException:
Cause1 Description: "Error during type conversion from type: java.lang.String to the required type: int with value [% JMS_Input_Consumers %] due java.lang.NumberFormatException: For input string: \"[% JMS.LOGSBUS.JMS_Input_Consumers %]\"
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.createTypeConversionException(BaseTypeConverterRegistry.java:610)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:177)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:156)
at org.apache.camel.util.IntrospectionSupport.convert(IntrospectionSupport.java:622)
at org.apache.camel.util.IntrospectionSupport.setProperty(IntrospectionSupport.java:537)
at org.apache.camel.util.IntrospectionSupport.setProperty(IntrospectionSupport.java:602)
at org.apache.camel.util.IntrospectionSupport.setProperties(IntrospectionSupport.java:459)
at org.apache.camel.util.IntrospectionSupport.setProperties(IntrospectionSupport.java:469)
at org.apache.camel.util.EndpointHelper.setProperties(EndpointHelper.java:256)
at org.apache.camel.impl.DefaultComponent.setProperties(DefaultComponent.java:257)
at org.apache.camel.component.jms.JmsComponent.createEndpoint(JmsComponent.java:886)
at org.apache.camel.impl.DefaultComponent.createEndpoint(DefaultComponent.java:114)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
Caused by: org.apache.camel.NumberFormatException: Error during type conversion from type: java.lang.String to the required type: int with value [% JMS_Input_Consumers %] due java.lang.NumberFormatException: For input string: \"[% JMS.LOGSBUS.JMS_Input_Consumers %]\"
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.createTypeConversionException(BaseTypeConverterRegistry.java:610)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:177)"

Caused by count: 3
Cause1 Error: org.apache.camel.NumberFormatException:
Cause1 Description:"Error during type conversion from type: java.lang.String to the required type: int with value [% JMS_Input_Consumers %] due java.lang.NumberFormatException: For input string: \"[% JMS.LOGSBUS.JMS_Input_Consumers %]\"
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.createTypeConversionException(BaseTypeConverterRegistry.java:610)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:177)"

Caused by count: 3
Cause1 Error: org.apache.camel.ArrayIndexOutofboundException::
Cause1 Description:"Error during type conversion from type: java.lang.String to the required type: int with value [% JMS_Input_Consumers %] due java.lang.NumberFormatException: For input string: \"[% JMS.LOGSBUS.JMS_Input_Consumers %]\"
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.createTypeConversionException(BaseTypeConverterRegistry.java:610)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:177)"

SAMPLE DATA Below:
Caused by: org.apache.camel.TypeConversionException: Error during type conversion from type: java.lang.String to the required type: int with value [% JMS_Input_Consumers %] due java.lang.NumberFormatException: For input string: \"[% JMS.LOGSBUS.JMS_Input_Consumers %]\"
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.createTypeConversionException(BaseTypeConverterRegistry.java:610)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:177)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:156)
at org.apache.camel.util.IntrospectionSupport.convert(IntrospectionSupport.java:622)
at org.apache.camel.util.IntrospectionSupport.setProperty(IntrospectionSupport.java:537)
at org.apache.camel.util.IntrospectionSupport.setProperty(IntrospectionSupport.java:602)
at org.apache.camel.util.IntrospectionSupport.setProperties(IntrospectionSupport.java:459)
at org.apache.camel.util.IntrospectionSupport.setProperties(IntrospectionSupport.java:469)
at org.apache.camel.util.EndpointHelper.setProperties(EndpointHelper.java:256)
at org.apache.camel.impl.DefaultComponent.setProperties(DefaultComponent.java:257)
at org.apache.camel.component.jms.JmsComponent.createEndpoint(JmsComponent.java:886)
at org.apache.camel.impl.DefaultComponent.createEndpoint(DefaultComponent.java:114)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
Caused by: org.apache.camel.NumberFormatException: Error during type conversion from type: java.lang.String to the required type: int with value [% JMS_Input_Consumers %] due java.lang.NumberFormatException: For input string: \"[% JMS.LOGSBUS.JMS_Input_Consumers %]\"
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.createTypeConversionException(BaseTypeConverterRegistry.java:610)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:177)
Caused by: org.apache.camel.ArrayIndexOutofboundException: Error during type conversion from type: java.lang.String to the required type: int with value [% JMS_Input_Consumers %] due java.lang.NumberFormatException: For input string: \"[% JMS.LOGSBUS.JMS_Input_Consumers %]\"
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.createTypeConversionException(BaseTypeConverterRegistry.java:610)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:177)

Re: Extraction error from log file

nagaraju_chitta — Tue, 29 Sep 2020 16:02:11 GMT

out of the below sample data would like to extract

number of cause by errors count : 3
For each cause by Error: org.apache.camel.TypeConversionException:
Cause By Error Description: Error during type conversion from type: java.lang.String to the required type: int with value [% JMS_Input_Consumers %] due java.lang.NumberFormatException: For input string: \"[% JMS.LOGSBUS.JMS_Input_Consumers %]\"
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.createTypeConversionException(BaseTypeConverterRegistry.java:610)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:177)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:156)
at org.apache.camel.util.IntrospectionSupport.convert(IntrospectionSupport.java:622)
at org.apache.camel.util.IntrospectionSupport.setProperty(IntrospectionSupport.java:537)
at org.apache.camel.util.IntrospectionSupport.setProperty(IntrospectionSupport.java:602)
at org.apache.camel.util.IntrospectionSupport.setProperties(IntrospectionSupport.java:459)
at org.apache.camel.util.IntrospectionSupport.setProperties(IntrospectionSupport.java:469)
at org.apache.camel.util.EndpointHelper.setProperties(EndpointHelper.java:256)
at org.apache.camel.impl.DefaultComponent.setProperties(DefaultComponent.java:257)
at org.apache.camel.component.jms.JmsComponent.createEndpoint(JmsComponent.java:886)
at org.apache.camel.impl.DefaultComponent.createEndpoint(DefaultComponent.java:114)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
number of cause by errors count : 3
For each cause by Error: org.apache.camel.NumberFormatException
Cause By Error Description:Error during type conversion from type: java.lang.String to the required type: int with value [% JMS_Input_Consumers %] due java.lang.NumberFormatException: For input string: \"[% JMS.LOGSBUS.JMS_Input_Consumers %]\"
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.createTypeConversionException(BaseTypeConverterRegistry.java:610)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:177)
number of cause by errors count : 3
For each cause by Error: org.apache.camel.ArrayIndexOutofboundException:
Cause By Error Description: Error during type conversion from type: java.lang.String to the required type: int with value [% JMS_Input_Consumers %] due java.lang.NumberFormatException: For input string: \"[% JMS.LOGSBUS.JMS_Input_Consumers %]\"
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.createTypeConversionException(BaseTypeConverterRegistry.java:610)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:177)

SAMPLE DATA*strong text*
Caused by: org.apache.camel.TypeConversionException: Error during type conversion from type: java.lang.String to the required type: int with value [% JMS_Input_Consumers %] due java.lang.NumberFormatException: For input string: \"[% JMS.LOGSBUS.JMS_Input_Consumers %]\"
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.createTypeConversionException(BaseTypeConverterRegistry.java:610)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:177)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:156)
at org.apache.camel.util.IntrospectionSupport.convert(IntrospectionSupport.java:622)
at org.apache.camel.util.IntrospectionSupport.setProperty(IntrospectionSupport.java:537)
at org.apache.camel.util.IntrospectionSupport.setProperty(IntrospectionSupport.java:602)
at org.apache.camel.util.IntrospectionSupport.setProperties(IntrospectionSupport.java:459)
at org.apache.camel.util.IntrospectionSupport.setProperties(IntrospectionSupport.java:469)
at org.apache.camel.util.EndpointHelper.setProperties(EndpointHelper.java:256)
at org.apache.camel.impl.DefaultComponent.setProperties(DefaultComponent.java:257)
at org.apache.camel.component.jms.JmsComponent.createEndpoint(JmsComponent.java:886)
at org.apache.camel.impl.DefaultComponent.createEndpoint(DefaultComponent.java:114)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
Caused by: org.apache.camel.NumberFormatException: Error during type conversion from type: java.lang.String to the required type: int with value [% JMS_Input_Consumers %] due java.lang.NumberFormatException: For input string: \"[% JMS.LOGSBUS.JMS_Input_Consumers %]\"
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.createTypeConversionException(BaseTypeConverterRegistry.java:610)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:177)
Caused by: org.apache.camel.ArrayIndexOutofboundException: Error during type conversion from type: java.lang.String to the required type: int with value [% JMS_Input_Consumers %] due java.lang.NumberFormatException: For input string: \"[% JMS.LOGSBUS.JMS_Input_Consumers %]\"
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.createTypeConversionException(BaseTypeConverterRegistry.java:610)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:177)

Re: Extraction error from log file

nagaraju_chitta — Tue, 29 Sep 2020 16:02:14 GMT

The above is is pulling the whole stack trace. The ask is as follows
out of the below sample data would like to extract

number of cause by errors count : 3
For each cause by Error: org.apache.camel.TypeConversionException:
Cause By Error Description: Error during type conversion from type: java.lang.String to the required type: int with value [% JMS_Input_Consumers %] due java.lang.NumberFormatException: For input string: \"[% JMS.LOGSBUS.JMS_Input_Consumers %]\"
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.createTypeConversionException(BaseTypeConverterRegistry.java:610)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:177)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:156)
at org.apache.camel.util.IntrospectionSupport.convert(IntrospectionSupport.java:622)
at org.apache.camel.util.IntrospectionSupport.setProperty(IntrospectionSupport.java:537)
at org.apache.camel.util.IntrospectionSupport.setProperty(IntrospectionSupport.java:602)
at org.apache.camel.util.IntrospectionSupport.setProperties(IntrospectionSupport.java:459)
at org.apache.camel.util.IntrospectionSupport.setProperties(IntrospectionSupport.java:469)
at org.apache.camel.util.EndpointHelper.setProperties(EndpointHelper.java:256)
at org.apache.camel.impl.DefaultComponent.setProperties(DefaultComponent.java:257)
at org.apache.camel.component.jms.JmsComponent.createEndpoint(JmsComponent.java:886)
at org.apache.camel.impl.DefaultComponent.createEndpoint(DefaultComponent.java:114)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
number of cause by errors count : 3
For each cause by Error: org.apache.camel.NumberFormatException
Cause By Error Description:Error during type conversion from type: java.lang.String to the required type: int with value [% JMS_Input_Consumers %] due java.lang.NumberFormatException: For input string: \"[% JMS.LOGSBUS.JMS_Input_Consumers %]\"
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.createTypeConversionException(BaseTypeConverterRegistry.java:610)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:177)
number of cause by errors count : 3
For each cause by Error: org.apache.camel.ArrayIndexOutofboundException:
Cause By Error Description: Error during type conversion from type: java.lang.String to the required type: int with value [% JMS_Input_Consumers %] due java.lang.NumberFormatException: For input string: \"[% JMS.LOGSBUS.JMS_Input_Consumers %]\"
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.createTypeConversionException(BaseTypeConverterRegistry.java:610)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:177)

Caused by: org.apache.camel.TypeConversionException: Error during type conversion from type: java.lang.String to the required type: int with value [% JMS_Input_Consumers %] due java.lang.NumberFormatException: For input string: \"[% JMS.LOGSBUS.JMS_Input_Consumers %]\"
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.createTypeConversionException(BaseTypeConverterRegistry.java:610)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:177)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:156)
at org.apache.camel.util.IntrospectionSupport.convert(IntrospectionSupport.java:622)
at org.apache.camel.util.IntrospectionSupport.setProperty(IntrospectionSupport.java:537)
at org.apache.camel.util.IntrospectionSupport.setProperty(IntrospectionSupport.java:602)
at org.apache.camel.util.IntrospectionSupport.setProperties(IntrospectionSupport.java:459)
at org.apache.camel.util.IntrospectionSupport.setProperties(IntrospectionSupport.java:469)
at org.apache.camel.util.EndpointHelper.setProperties(EndpointHelper.java:256)
at org.apache.camel.impl.DefaultComponent.setProperties(DefaultComponent.java:257)
at org.apache.camel.component.jms.JmsComponent.createEndpoint(JmsComponent.java:886)
at org.apache.camel.impl.DefaultComponent.createEndpoint(DefaultComponent.java:114)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
Caused by: org.apache.camel.NumberFormatException: Error during type conversion from type: java.lang.String to the required type: int with value [% JMS_Input_Consumers %] due java.lang.NumberFormatException: For input string: \"[% JMS.LOGSBUS.JMS_Input_Consumers %]\"
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.createTypeConversionException(BaseTypeConverterRegistry.java:610)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:177)
Caused by: org.apache.camel.ArrayIndexOutofboundException: Error during type conversion from type: java.lang.String to the required type: int with value [% JMS_Input_Consumers %] due java.lang.NumberFormatException: For input string: \"[% JMS.LOGSBUS.JMS_Input_Consumers %]\"
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.createTypeConversionException(BaseTypeConverterRegistry.java:610)
at org.apache.camel.impl.converter.BaseTypeConverterRegistry.mandatoryConvertTo(BaseTypeConverterRegistry.java:177)

Re: Extraction error from log file

inventsekar — Wed, 27 Sep 2017 11:35:36 GMT

For new splunker's and @Sukisen1981 reference,
when writing SPL queries, we will need to do this step -
1. select the SPL query lines and then, on the editing ribbon/tool bar, choose the 5th icon "Code Sample", so that the SPL code will be preserved.
2. another short cut is adding <pre> SPL query </pre> also can do the same.
3. around the SPL query, we can add "backtick ()" as well.. that will make the SPL as above on the 2nd point(not the full line, only the SPL will becomecode`)

Re: Extraction error from log file

Sukisen1981 — Wed, 27 Sep 2017 12:19:10 GMT

|  rex field=_raw (?<Title>.*?)": Error" 
 | rex field=_raw (?s)Error(?<Description>.*)
| eval Description="Description: Error"+Description
| table Title,Description

thanks @inventsekar

Re: Extraction error from log file

Sukisen1981 — Thu, 28 Sep 2017 13:24:10 GMT

| eval s=split(_raw,"Caused by:")
| rex field=_raw max_match=0 "(?<errcount>\ Error)"
 | stats count(errcount) by s 
| rex field=s max_match=0 (?<Title>.*?)": Error" 
| reverse 
| where Title !="*"
| rex field=s (?s)":"(?<Description>.*) 
| rename count(errcount) AS count 
|fields count,Title,Description

hi your requirement is clear now, try this...if you want as rows that can be done as well...but just see this output first....

Re: Extraction error from log file

Sukisen1981 — Fri, 29 Sep 2017 15:25:54 GMT

hi - did you check this out?

Re: Extraction error from log file

nagaraju_chitta — Mon, 02 Oct 2017 21:44:01 GMT

@Sukisen1981...thank you for your response .will check and comeback ASAP

Re: Extraction error from log file

nagaraju_chitta — Wed, 11 Oct 2017 17:54:31 GMT

@Sukisen1981: The moment I say
| rex field=_raw (?.*?)": Error"

the search will hung since too many errors will be there in the log and leads to performance hit. Is there way we can extract a portion and then try?
Error and related causeby from the logs