https://community.splunk.com/t5/Getting-Data-In/how-to-find-n-th-line-data-using-rex/m-p/147154#M29971 <P>get nth line data</P> Tue, 21 Oct 2014 08:36:20 GMT srinathd 2014-10-21T08:36:20Z https://community.splunk.com/t5/Getting-Data-In/how-to-find-n-th-line-data-using-rex/m-p/147153#M29970 <P>Hi,</P> <P>how to find nth line data in an event. for example: I have to get 7th line data and needs to correlate with the corresponding values in 8th line. how to achieve this </P> <P>abc<BR /> xyz<BR /> 1<BR /> 001</P> <P>45654<BR /> abc def ghi jkl mno<BR /> pqr stu vwx yza bcd<BR /> 345</P> <P>001</P> <P>Thanks,<BR /> Srinath</P> Wed, 01 Oct 2014 08:38:41 GMT https://community.splunk.com/t5/Getting-Data-In/how-to-find-n-th-line-data-using-rex/m-p/147153#M29970 srinathd 2014-10-01T08:38:41Z https://community.splunk.com/t5/Getting-Data-In/how-to-find-n-th-line-data-using-rex/m-p/147154#M29971 <P>get nth line data</P> Tue, 21 Oct 2014 08:36:20 GMT https://community.splunk.com/t5/Getting-Data-In/how-to-find-n-th-line-data-using-rex/m-p/147154#M29971 srinathd 2014-10-21T08:36:20Z https://community.splunk.com/t5/Getting-Data-In/how-to-find-n-th-line-data-using-rex/m-p/147155#M29972 <P>Using the rex we can extract 7 th line data from the multiline event<BR /> example: |rex <CODE>"([^\n\r]*\n){6}(?[^\n\r]*)\n"</CODE></P> Tue, 23 Jun 2015 09:12:28 GMT https://community.splunk.com/t5/Getting-Data-In/how-to-find-n-th-line-data-using-rex/m-p/147155#M29972 srinathd 2015-06-23T09:12:28Z