How to create regex for below data?

AK_Splunk — Fri, 06 Jan 2023 22:20:53 GMT

Need help with regex for below data. Please assist me on the same.

field name -------- fieldvalue

Devicename------GNTESTFS1

Sample data

Jan 5 15:34:18 7.73.151.197 1 2023-01-05T14:34:17Z 1.2.3.44 StorageArray - - [0@0] GNTESTFS1;2288;Critical;Either the NTP server's resolved or configured IP address is wrong or the IP address is unavailable via the attached network
Jan 5 15:31:20 7.73.151.197 1 2023-01-05T14:31:19Z 1.2.3.44 StorageArray - - [0@0] GNTESTFS1;2288;Critical;Either the NTP server's resolved or configured IP address is wrong or the IP address is unavailable via the attached network
Jan 5 09:32:37 7.73.151.197 1 2023-01-05T08:32:36Z 1.2.3.44 StorageArray - - [0@0] GNTESTFS1;2288;Critical;Either the NTP server's resolved or configured IP address is wrong or the IP address is unavailable via the attached network

Thanks in advance

Re: Need help with regex for below data

gcusello — Fri, 06 Jan 2023 10:44:16 GMT

Hi @AK_Splunk,

please try this regex :

| rex "\]\s+(?<Devicename>[^;]+)"

that you can test at https://regex101.com/r/GDOK8U/1

Ciao.

Giuseppe

topic How to create regex for below data? in Getting Data In

How to create regex for below data?

Re: Need help with regex for below data